Redact PII, PHI, PCI and secrets out of a block of text using Strac DLP. Returns the redacted text plus the data element types that were found. Call this before putting untrusted or user-supplied text into a prompt, a log line, a ticket or any downstream system.

Detect sensitive data in text without changing it — personal data (PII), health data (PHI), payment and card data (PCI), and credentials such as API keys, cloud access keys, tokens and connection strings. Returns the data element types Strac found. Use this to decide whether text is safe to send onward; use redact_text when you need the sanitised text itself.

Detect PII, PHI, PCI and secrets in a local file — image, PDF, scan or text. Strac runs OCR on images and scanned documents. Returns the data element types found, without modifying the file.

Redact PII, PHI, PCI and secrets out of a local file — image, PDF, scan or text — and write the redacted copy to disk. The original is never modified. Returns the path to the redacted file.

Resolve Strac vault tokens (tkn_…) back to their original values. Use this only when the caller is authorised to see the raw sensitive data. Accepts up to 10 tokens per call and requires an IP-allowlisted server-to-server key in live mode.