Configurable Rules

Policy Engine

Fine-grained control over what gets tokenized and how. Set organization-wide policies with per-request flexibility.

Key Capabilities

Choose which PII types to tokenize, mask, or pass through. Different policies for different data flows.

Set a default policy that applies to all API requests from your organization. New entity types are automatically covered.

Override the default policy on individual API calls. Useful for different sensitivity levels across use cases.

Choose between fast mode (regex only, sub-20ms) and full mode (regex + NER, sub-50ms) based on your latency requirements.

Policy changes are tracked with timestamps and user attribution. Know who changed what and when.

Policies maintain version history so you can review and revert changes. Every API call records which policy version was applied.

See how AIQ can help you tokenize sensitive data with DPDPA compliance.