Runtype
Changelog
FeatureJuly 2, 20261 min read

PII redaction for traces and logs

A new redaction capability keeps personal data like emails, phone numbers, and card numbers out of your traces, logs, and telemetry. Turn it on with one setting.

privacypiiloggingtracingbraintrust

Keep personal data out of traces and logs with one setting. Runtype can now detect and mask PII (emails, phone numbers, credit cards, national IDs, IBANs) before it is written anywhere downstream.

  • Redact from traces. The Braintrust integration gains a customer-owned "Redact from traces" setting that masks PII in traces written to your Braintrust project. Off by default: you decide.
  • Logs and telemetry too. Set the piiRedaction policy on a dispatch, agent, flow, surface, or product and PII is masked at the tail-log and telemetry chokepoints, covering dashboard logs, stored customer logs, and live tail.
  • Precision-first detection. Detectors use checksum validation (Luhn, mod-97) and formatting cues, so version strings and internal IDs are not mangled by false positives.
  • Secrets stay out of step results. Independently of PII settings, secrets echoed in prompts, outputs, or step configs are now redacted in persisted flow step results, without breaking resume or replay.