---
schema_version: "1"
id: d3cbc0d2bd733abbffa9c6a49e2890d4839448be9841280cf1c679f0fea7872c
title: Masking Unstructured Data in Data 360 (Beta)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_unstr_data_masking.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_unstr_data_masking.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 59bbb257d15c9eb187988a8e8c96f3e8426a64d5819ef7dfa10949692d68159b
description: Mask sensitive information in unstructured files, such as PDFs and text documents, so that only authorized users can view it. Masking policies work on sensitive data that’s automatically tagged or identified.
products:
  - Data 360
release: "264"
---
# Masking Unstructured Data in Data 360 (Beta)

Mask sensitive information in unstructured files, such as PDFs and text documents, so that only authorized users can view it. Masking policies work on sensitive data that’s automatically tagged or identified.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

## How Unstructured Data Masking Works

Tagging is the foundation for masking unstructured data. When Data 360 ingests unstructured files as unified data lake objects (UDLOs), it analyzes the content and automatically applies personally identifiable information (PII) tags based on recognized patterns. For example, an email address such as mymail@example.com is automatically tagged with `pii.email`. For the list of supported PII tags, see [Einstein Trust Layer Region and Language Support](https://help.salesforce.com/s/articleView?id=ai.generative_ai_trust_lang_region.htm&type=5&language=en_US). After data is tagged, masking policies hide sensitive fields in query results. For example, a support rep sees a customer’s purchase history, while details such as phone numbers and email addresses remain masked.

You can tag UDLOs up to 5 GB per object. For larger data, split it into multiple UDLOs and create separate search indexes.

A single value can match multiple data types. For example, in mariarodriguez@example.com, the entire string matches an email address, while the substring rodriguez also matches the last name. In this instance, Data 360 fully masks the value to prevent accidental exposure. For example, mariarodriguez@example.com becomes **XXXXXXXXXXXXXXXXXXXXX**.

Unstructured tagging supports content in these languages:

- English
- Japanese
- German
- Spanish
- French
- Italian

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_note.png)

Note Content tagging isn’t supported for orgs that have Bring Your Own Key (BYOK) enabled because encrypted data can’t be processed for tagging.

- **[Configure Automatic Content Tagging (Beta)](https://help.salesforce.com/s/articleView?id=data.c360_a_configure_auto_content_tagging.htm&release=264.0.0&type=5)**  
    Configure automatic content tagging for unstructured files and define a confidence threshold. Data 360 approves tags that meet or exceed the threshold, but others require manual review.