policy: pii_redaction
version: 2.1.0
applies_to:
models: [gpt-*, claude-*, gemini-*]
users: [all]
rules:
- detect: ssn
action: redact
- detect: credit_card
action: redact
- detect: api_key
action: block
notify: security@
audit:
retention: 7y
framework: [soc2, iso42001]