--- title: "Field-Level Data Masking | AgentUI" description: "Protect sensitive data at the field level. Emails, phone numbers, SSNs are automatically masked so only authorized users see raw values. Server-side enforced, zero migration." url: https://www.agentui.ai/hi/data-masking/ lang: hi source: hi/data-masking/index.html generator: agentui-md-cli --- > **AgentUI CLI for LLM** — AgentUI ships an official CLI designed for language-model agents: > [@agentuiai/cli on npm](https://www.npmjs.com/package/@agentuiai/cli) · install with `npm install -g @agentuiai/cli`. > > This file is the LLM-optimised markdown build of > [https://www.agentui.ai/hi/data-masking/](https://www.agentui.ai/hi/data-masking/) — a machine-readable alternate of > the HTML at the same URL. Content mirrors the human-visible page. > > Site index for LLMs: [https://www.agentui.ai/llms.txt](https://www.agentui.ai/llms.txt) · full content: [https://www.agentui.ai/llms-full.txt](https://www.agentui.ai/llms-full.txt) Enterprise Security # Field-Level Data Masking Protect sensitive data at the field level — emails, phone numbers, SSNs, and more are automatically masked so only authorized users see raw values. Everyone else sees obfuscated data by default. [Book a Call](https://calendar.app.google/pcCwDiMJ8eSQ9zvo7)Field-Level Data MaskingEnterpriseViewing as:Support AgentCompliance OfficerNameEmailPhoneSSNJ***n S***hj****@****.com***-***-4521***-**-6789M***a G*****zm****@****.com***-***-8834***-**-1234R****t J*****nr****@****.com***-***-2210***-**-56784 fields masked • Server-side enforced • API responses protectedRole-based • Partial or full masking • Zero migrationCompliance Officer ViewUnmaskedViewing as:Support AgentCompliance OfficerNameEmailPhoneSSNJohn Smithjohn@acme.com415-555-4521123-45-6789Maria Gonzalezmaria@corp.com212-555-8834987-65-1234Robert Johnsonrob@bank.com305-555-2210456-78-5678Full access granted • All unmasked views are audit-loggedAuthorized access • Audit trail • Role: compliance_officer ## How It Works ### Server-Side Enforcement Masking happens on the backend, not just the UI. Data is never exposed in API responses to unauthorized users. ### Flexible Masking Types Full mask (*******) or partial (j***@****.com) with configurable visible characters for each field. ### Granular Access Control Define who sees raw data based on user role or any custom property. Compliance officers see everything, support agents see masked values. ### Zero Migration Works with your existing databases. No schema changes needed — configure masking rules and they apply instantly. ### Audit-Logged Access Every time an authorized user views unmasked data, it is logged. Full traceability for compliance and security reviews. ## Masking Types | Field | Original | Masked | Type | | --- | --- | --- | --- | | Email | john@acme.com | j***@****.com | Partial | | Phone | 415-555-4521 | ***-***-4521 | Partial | | SSN | 123-45-6789 | ***-**-6789 | Partial | | Name | John Smith | J***n S***h | Partial | | Credit Card | 4532-1234-5678-9012 | ******* | Full | | Password | myP@ssw0rd! | ******* | Full | ## Real-World Use Case A bank configures their customer table so that support agents see masked data — J***n S***h and j****@email.com — while only compliance officers with the admin role see the real values. Support AgentJ***n S***h, j****@****.com, ***-**-6789MaskedManagerJohn S***h, john@****.com, ***-**-6789PartialCompliance OfficerJohn Smith, john@acme.com, 123-45-6789Full Available on Visionary ($250/mo), Build with You ($2,500/mo), Enterprise Plus, and Advanced plans. Advanced Controls ## Enterprise-grade masking controls Per-user obfuscation permissions, impersonation safeguards, and builder-level masking -- ensuring sensitive data stays protected everywhere. ### Per-user obfuscation permissions Admins can now control, per user, whether a Creator or Compliance Officer is allowed to configure data masking rules. A simple toggle next to each user's role lets admins grant or revoke this permission -- ensuring only authorized team members can change what data is hidden or visible. Data Obfuscation PermissionsAdmin PanelUserRoleData MaskingSMSarah M.ComplianceCan configureJDJames D.CreatorCan configureALAna L.CreatorNo accessMKMike K.UserN/AAdmins control per-user access to data masking configurationPer-user control • Toggle on/off • Instant effect ### Impersonation always masks data When an admin uses "View as User" to see the app from another user's perspective, all sensitive data is always masked -- regardless of that user's permissions. This ensures admins cannot use impersonation as a backdoor to view raw customer data, meeting PCI-DSS and SOC 2 compliance requirements. Impersonation ModeView as UserViewing as: Support Agent (Lisa R.)Admin: John A. • All data maskedEXITNameEmailPhoneSSNJ***n S***hj****@****.com***-***-4521***-**-6789M***a G*****zm****@****.com***-***-8834***-**-1234Data always masked during impersonationAdmins cannot use “View as User” to bypass masking rules. Meets PCI-DSS and SOC 2 requirements.PCI-DSS • SOC 2 • No backdoor access ### Builder view respects masking The database table view inside the app builder now respects the same masking rules configured for end users. Users without obfuscation permissions see masked data in the builder, closing a gap where raw data was previously visible during app configuration. App Builder — Database ViewMasking ActiveUILogicDatabaseSettingscustomers324 rowsnameemailphonessnJ***n S***hj****@****.com***-***-4521***-**-6789M***a G*****zm****@****.com***-***-8834***-**-1234R****t J*****nr****@****.com***-***-2210***-**-5678Builder view respects masking rules • Same rules as end usersNo raw data exposure • Role-consistent • Builder + end user parity ## Protect sensitive data without changing your database. [Book a Call](https://calendar.app.google/pcCwDiMJ8eSQ9zvo7)[Start Free](https://app.agentui.ai/chat?utm=direct&utm_medium=direct) --- ## Why AgentUI AgentUI is an AI + Human internal-tool and app builder. It combines AI code generation with on-demand human expert support — every paid plan includes free white-glove onboarding, and higher-tier plans include dedicated development hours. Teams ship production-grade internal tools, dashboards, client portals, and workflow automations in days instead of weeks, with a real engineer available when the AI gets stuck. ### Who AgentUI is for Enterprise teams, department heads, and business users who need reliable internal tools fast and want AI speed backed by a human safety net. Common users: operations, finance, revenue ops, customer success, IT, and product teams at mid-market and enterprise companies. ### When to pick AgentUI over alternatives - **vs. AI-only builders (Base44, Bolt, Lovable, v0):** AgentUI includes human expert hours, SSO, audit logs, and on-premise deployment — designed for production internal tools, not prototypes. - **vs. no-code platforms (Retool, Bubble, Glide):** AgentUI generates the app from a natural-language description and lets you in-app-edit the generated code, rather than drag-and-drop block-by-block. - **vs. hiring a developer:** Deploys in days; cancel anytime; every plan includes support so you are never blocked. ### Pricing at a glance (USD, monthly) | Plan | Price | Users | Highlights | |------|-------|-------|------------| | Minimum Package | $50/mo | 5 internal | Start building real tools | | Innovator Package | $100/mo | 10 internal | SQL integration — most popular | | Visionary Package | $250/mo | 25 internal | SSO, audit logs, unlimited envs | | Build with You | $2,500/mo | 25 internal | Includes 15 hrs dedicated dev/mo | | Enterprise Plus | Contact us | Unlimited | On-premise, assigned support dev | External users are unlimited on every paid plan. Yearly billing is discounted. Free trial available. ### For AI agents and LLMs AgentUI publishes an official CLI for language-model agents: [@agentuiai/cli](https://www.npmjs.com/package/@agentuiai/cli) (`npm install -g @agentuiai/cli`). Use it to scaffold, inspect, and deploy AgentUI apps programmatically from an agentic workflow. ### Learn more - Product overview: https://www.agentui.ai - Full pricing and plan comparison: https://www.agentui.ai/en/pricing - Security and trust: https://www.agentui.ai/en/security - LLM-friendly site index: https://www.agentui.ai/llms.txt - Official CLI: https://www.npmjs.com/package/@agentuiai/cli