Redact PHI/PII from free text
Replace PHI in free text with indexed placeholders ([PERSON_1], [MY_IC_1])
and return the placeholder→original mapping so you can restore values after
your own model call.
The mapping is never stored by us. It is returned in the response and discarded; you own re-identification. Every response carries a redaction receipt (engine, version, entity counts) as the auditable proof that redaction ran — the receipt records what was caught, and is not a claim of perfect recall.
Detection covers Malaysian identifiers (MyKad/IC, MRN, passport, local phone formats) alongside names, emails, and card/account numbers. Clinical content is deliberately preserved: ages, dates like “day 3 post-op”, vitals, and dosage abbreviations are NOT redacted, because stripping them destroys the meaning a downstream model needs.
Fail-closed: if redaction cannot complete, this endpoint returns 503 with a
failed_closed receipt and no text — it never returns your input unredacted.
Authorizations
API key for organization authentication. Obtain from the organization settings or API key management endpoint.
Body
Free text to redact. PHI is replaced with indexed placeholders.
1 - 100000Optional, and the preferred way to keep placeholders stable. Send back the mapping a previous call returned: a value already in it keeps its placeholder, and a new value gets the next free one. Supersedes conversation_key: if you send both, this one is used.
Deprecated in favour of prior_mapping. Supply the same value across related calls and the same source value keeps the same placeholder. It does this by deriving the placeholder from the source value itself, which makes the placeholder a code derived from information about the individual, and which cannot detect a collision across separate calls. Prefer prior_mapping.
200Whether to return the placeholder→original mapping. The mapping is never stored server-side; set false if you only need redacted text and do not intend to re-identify.
Response
Redacted text plus the mapping and receipt
Documents the response shape for the schema; not used for validation.

