Layered detector chain: known-contacts (your vault) → regex → Presidio NER → insurance dictionary. Mapping vault is local-only sqlcipher.
Tools
phi_scrub— Scrub PHI from a payload.phi_rehydrate— Re-hydrate scrubbed values back to real ones.phi_audit_query— Query the scrub audit log.phi_check_baa— Check whether a destination is BAA-allowlisted.