---
schema_version: "1"
id: af1d177333b2254a37f72df3aa07276a8fb6039e7e73cddd9274f898342cb06e
title: Select What Data To Mask
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/generative_ai_mask_select.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.generative_ai_mask_select.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0258a5f2171d1f3c8e6e624a1d5552fb88ce618d312b7e148c6e7505beb0bd64
description: Select which data you want to mask and prevent exposure of sensitive data to the large language model (LLM). These settings are applied to your Salesforce org.
products:
  - Agentforce
  - Cross Cloud
release: "264"
---
# Select What Data To Mask

Select which data you want to mask and prevent exposure of sensitive data to the large language model (LLM). These settings are applied to your Salesforce org.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with an Einstein for Sales, Einstein for Platform, Einstein for Service, Einstein 1 Service, or Einstein GPT Service add-on. To purchase add-ons, contact your Salesforce account executive.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d169541e58">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">To select what data to mask:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">View Setup </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">&nbsp;</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">AND</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">&nbsp;</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d169541e58 ">Customize Application</td>

          </tr>
        </tbody>
      </table>

Einstein Generative AI and Data Masking must be enabled.

Data masking for LLMs is disabled for agents. See [Data Masking and Agents](https://help.salesforce.com/s/articleView?id=ai.agent_trust_data_masking.htm&release=264.0.0&type=5 "In Einstein Trust Layer, pattern-based and field-based data masking for large language models (LLMs) is disabled for agents."). For embedded generative AI features, such as [Einstein Service Replies](https://help.salesforce.com/s/articleView?id=service.reply_recs_generative_ai_service_replies.htm&type=5&language=en_US), [Einstein Work Summaries](https://help.salesforce.com/s/articleView?id=service.cc_generative_ai_work_summaries.htm&type=5&language=en_US) data masking is available, and you can configure it in Einstein Trust Layer setup.

At initial setup, the most commonly used entries are turned on, and less frequently used entries are off.

1. From Setup, in the Quick Find box, enter Einstein, and then select **Einstein Trust Layer**.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ai-generative_ai-264-0-0-production-enus/f8ef6498-d7b2-44e3-9b34-ffd5a850aae9/images/icon_note.png)
    
    Note If you can’t find **Einstein Generative AI Setup**, ensure that your org meets the prerequisites for any generative AI features you plan to use. For more support, contact your Salesforce Account Executive (AE).
2. Select **Go to Einstein Trust Layer**
3. Turn on large language model data masking.
4. Review the list of data types included in the pattern-based masking section and make changes as needed. Some data types are turned on for data masking by default.
5. Turn on data masking for Shield Platform Encryption, compliance categories, and data sensitivity levels. Confirm that the sensitive fields that must be masked are tagged with the correct compliance categories and data sensitivity levels in Object Manager.
    
    You see the Shield Platform Encryption option in Einstein Trust Layer setup only if you enabled it in your org.

#### See Also

- [Large Language Model Data Masking](https://help.salesforce.com/s/articleView?id=ai.generative_ai_mask_data.htm&release=264.0.0&type=5 "The Einstein Trust Layer identifies and masks sensitive information in the prompts before sending them to the large language model (LLM). The Einstein Trust Layer uses data masking to protect sensitive data such as personally identifiable information (PII) from being exposed to external LLMs.")
- [Einstein Trust Layer Region and Language Support](https://help.salesforce.com/s/articleView?id=ai.generative_ai_trust_lang_region.htm&release=264.0.0&type=5 "The Einstein Trust Layer detects and masks sensitive data such as personally identifiable information (PII) for multiple regions and languages.")