PHI/PII redaction

Healthcare and financial teams often cannot keep raw personal or health identifiers in a conversation log. Convoship can detect and remove that data automatically, so detected identifiers are redacted before they are stored. It is a per-workspace setting, off by default, and every scrub is recorded in the audit log.

What it does

When redaction is on, every newly stored turn is scanned and any detected identifier is replaced with a labeled placeholder such as [REDACTED-SSN] or [REDACTED-EMAIL] before the turn is written. The replacement happens before the turn reaches storage for detected matches. Because the placeholder is labeled, your team and your auditors can still see what kind of identifier was present without ever seeing the value itself.

What is detected

• Social Security numbers (US)
• Dates of birth
• Phone numbers
• Email addresses
• Credit-card numbers (validated with the Luhn checksum to avoid over-redacting random numbers)
• Medical record numbers (MRN)
• ZIP / postal codes
• IP addresses (IPv4)
• Account, routing, policy, and member-ID numbers, plus other long digit sequences

Turn it on

1. Open Workspace → Settings.
2. Under Conversation log privacy, tick Redact PHI/PII from conversation logs.
3. Save. New turns are scrubbed from that moment on.

Audit trail

Enabling or disabling redaction is recorded in the workspace audit log, as is each redaction event. The redaction events record only how many identifiers of each kind were removed — never the values themselves — so you keep a compliance trail without re-introducing the data you set out to remove. Review it under Workspace → Audit log.