PII Detection for Fintech

import json
import requests

API_URL = "https://piidetectionapi.com/api/moderate.php"

def sanitize_event(event: dict) -> dict:
    """Scan an app event; hash identifiers so joins still work."""
    payload = json.dumps(event)
    resp = requests.post(
        API_URL,
        json={
            "api_key": "YOUR_API_KEY",
            "api_type": "pii_detection",
            "text": payload,
            "entities": [
                "EMAIL_ADDRESS", "PERSON_NAME",
                "IP_ADDRESS", "DEVICE_ID",
                "PHONE_NUMBER", "GPS_COORDINATES",
            ],
            "mask_mode": "hash",  # consistent tokens per user
            "threshold": 0.6,
        },
        timeout=30,
    )
    data = resp.json()
    if data["entities_detected"] > 0:
        metrics.incr("pii.events_sanitized",
                     tags=[f"service:{event.get('source')}"])
    return json.loads(data["anonymized_text"])

# consumer loop: sanitize before producing to the warehouse topic
for msg in consumer:
    clean = sanitize_event(json.loads(msg.value))
    producer.send("events.sanitized", json.dumps(clean).encode())

// Node.js: scrub inbound chat messages before storage
async function scrubMessage(text) {
  const res = await fetch(
    "https://piidetectionapi.com/api/moderate.php",
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({
        api_key: process.env.PII_API_KEY,
        api_type: "pii_detection",
        text,
        entities: ["CREDIT_CARD_NUMBER", "CVV_NUMBER",
                   "SSN", "FINANCIAL_ACCOUNT_NUMBER",
                   "DATE_OF_BIRTH", "PHONE_NUMBER"],
        mask_mode: "replace",
        threshold: 0.7
      })
    }
  );
  const data = await res.json();

  // PCI rule: a pasted PAN triggers an immediate workflow
  const hasPan = data.detected_entities
    .some(e => e.type === "CREDIT_CARD_NUMBER");
  if (hasPan) await flagConversationForPciReview();

  return data.anonymized_text; // store this, never the raw
}

app.post("/webhooks/chat-message", async (req, res) => {
  const clean = await scrubMessage(req.body.message);
  await saveTranscript(req.body.conversationId, clean);
  res.sendStatus(204);
});