Redaction (data masking)
Overview
ComplyCube automatically applies field-level redaction (also known as field masking or data masking) on sensitive data fields to ensure compliance with global privacy regulations.
Examples of redacted fields include:
Dutch BSN (Burgerservicenummer or Dutch Citizen Service Number)
Singapore NRIC (National Registration Identity Card Number)
Korean RRN (Resident Registration Number)
To meet strict compliance requirements, sensitive fields are automatically redacted from document images stored in the customer record and the results of Document Checks. Where applicable, redaction is applied to both the front and back of the document.
Users on our Growth or Enterprise plans can customize and add additional fields to their redaction policies. Please contact your Account Manager to update your policy.
Scope
Redaction is applied immediately on document capture, before the document image is stored. All instances of sensitive fields are masked, including those encoded within QR codes, the Visual Inspection Zone (VIZ), the Machine Readable Zone (MRZ), and barcodes.
ComplyCube does not store or process these sensitive fields, ensuring strong privacy protection and full regulatory compliance.
During Document Check processing, all redacted text fields return as fixed-length asterisk (*) strings. This format is consistent across the API, Web Portal, and reports.
Where redaction is applied
Redaction applies anywhere ComplyCube displays or returns document images or extracted fields, including:
Stored document images in the customer record (Portal and exports).
Document Check results returned via API and visible in the Portal.
Generated reports that include document images or extracted fields.
Configuring redaction policies
Redaction is enabled by default for supported sensitive fields.
If you need to modify or add masking rules, your redaction configuration can be updated by contacting your Account Manager.
Sample illustrations of field redaction
