When an agent accesses data through Vortalis, sensitive fields are automatically replaced with tokens in the format tok_xxxxxxxxxxxxxxxx. This means agents never see raw PII unless explicitly authorised.
How it works:
- Classifiers scan response data for sensitive patterns (emails, phone numbers, addresses, financial data, health records)
- Matching fields are replaced with unique
tok_tokens - The original values are stored securely in the token vault
- Agents can request to unwrap tokens; this triggers an approval flow if configured
Unwrapping: When an agent needs the real value behind a token, it submits an unwrap request. Depending on your policy, this may be auto-approved or require manual approval from an authorised user.