PII detection
AI Guide can flag columns that may contain personal information (PII), as an aid to reviewing and handling sensitive data carefully.
What PII detection does
During analysis, STYD flags columns that look like email addresses, phone numbers or secrets, from the column name and the shape of its values. A flagged column keeps no sample values. Other columns keep their sample values, and names or addresses among them are not masked.
Email addresses
Phone numbers
Passwords, tokens and keys
Card and bank numbers
It is a review aid, not a guarantee
PII detection helps you notice sensitive fields, but it is not perfect and it is not a legal or compliance guarantee. It can miss fields or flag the wrong ones. Owners and admins can correct the PII flag on a column.
The flag only decides which example values are kept. It does not hide a column from questions: an answer can show names, email addresses and phone numbers. Only passwords, tokens, keys, and card or bank numbers are always hidden. Names, addresses and other personal data that are not flagged are not detected at all.
Still use real access controls
Treat PII detection as one layer among several. For genuinely sensitive data, also rely on:
- database permissions (a read-only user with access only to what is needed)
- table visibility in the AI Guide, including hiding tables from specific members
Security and table-access topics are covered in more depth in the Security section.