Layered detector chain: known-contacts (your vault) → regex → Presidio NER → insurance dictionary. Mapping vault is local-only sqlcipher.

Tools

  • phi_scrub: Scrub PHI from a payload.
  • phi_rehydrate: Re-hydrate scrubbed values back to real ones.
  • phi_audit_query: Query the scrub audit log.
  • phi_check_baa: Check whether a destination is BAA-allowlisted.