AppsSecurity & Compliance

Data protection

Sensitive data in conversations

Turn on Protect sensitive data for an Autessa agent and every message a person sends is checked before the AI reads it. Card numbers, bank details, Social Security numbers and your own account numbers become short placeholders, saved conversations show only the placeholder, the real value is held for the conversation and never saved, and tools you allow can still use it.

Start free
Agent · Billing AssistantProtect sensitive data: OnSample
My card is 4242 4242 4242 4242, exp 08/29
Thanks. I’ll charge [card ending 4242, exp 08/29 — saved as PM_1] for $120.00.
The AI seesOnly the placeholder
Saved conversation showsOnly the placeholder
Real valueHeld for this conversation, never saved
Tools you allowReceive the real value

The problem

What problem does it solve?

Customers type card numbers into chat whether you ask them to or not. Once a full card number is in a transcript, every log, export and model call that touches it is in scope.

How it works

  1. 1

    Turn it on per agent

    In the agent’s settings, turn on Protect sensitive data.

  2. 2

    Values become placeholders

    A card becomes something like [card ending 4242, exp 08/29 — saved as PM_1]. The AI works with the placeholder.

  3. 3

    Allowed tools get the real value

    A tool you allow, such as one that sends the card to your payment processor, receives the real value at the moment it runs.

  4. 4

    Never saved

    The real values are kept encrypted only for the conversation they were given in.

Every option

Sensitive data in conversations: settings and options

SettingWhat it does
Protect sensitive dataPer agent.
What gets caughtCard numbers, bank details, Social Security numbers and your own account numbers.
Sensitive output (tools)The person who runs the tool sees the result, but it is never written to tool history or logs, and only a signed-in person can run it.

Permissions

Who can do what?

WhoWhat they can do
Agent editorsTurn protection on and choose which tools receive real values.
People reviewing historySee only placeholders.

What to know

  • Taking card numbers in a conversation and sending them to a payment processor from your tools puts that flow in scope for PCI DSS, with its own requirements.

Read the docs: Protect Sensitive Data →

Connections

How Sensitive data in conversations connects to the rest of Autessa

PII and PHI stripping →

Company-wide placeholders for prompts.

Autessa Payments →

Taking payments in a conversation.

AI Agent Firewall →

Sensitive-record limits and verification before tools run.

Reports, policies and security questionnaires are on the Autessa Trust Center.

FAQ

Sensitive data in conversations: questions

Does the AI ever see the full card number?

No. It works with the placeholder. Only the tools you allow receive the real value.

Is the card number stored in the conversation history?

No. Saved conversations show only the placeholder, and the real value is never saved.

Get started with Sensitive data in conversations

Turn on Protect sensitive data for an agent and card numbers, bank details and Social Security numbers become placeholders the AI works with, while allowed tools can still use the real value.

Start free

Reports, policies and questionnaires live on the Autessa Trust Center.

100% customizable, code and all

Make Autessa Security & Compliance fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours