Detect PII Proactively in Your Masking Policies

When configuring masking policies, Data Mask & Seed evaluates each object field's Sensitivity value—in addition to its Categories value—to proactively detect personally identifiable information (PII). Data Mask & Seed identifies object fields assigned a non-public Sensitivity level, such as Internal, Confidential, or Restricted, and automatically assigns the appropriate masking option for each field. The Sensitivity column in the Data Mask & Seed UI shows each field's assigned sensitivity value when you view or edit a policy object.

Where: This change applies to Lightning Experience in Essentials, Starter Suite, Professional, Enterprise, Performance, Unlimited, and Developer editions. Data Mask & Seed is available for customer production use, including Government Cloud, in all Salesforce regions. Salesforce automatically redirects users to their closest Salesforce region.

When: This Data Mask & Seed feature is generally available during October 2026.

Who: To access and work with Data Mask & Seed, assign users the following Permission Set License and Permission Set. Make sure to assign the Permission Set License before assigning the Permission Set:

  • Data Mask And Seed User Permission Set License
  • Data Mask and Seed User Permission Set

How: Data Mask & Seed is a native Salesforce app that requires no installation. In the App Launcher, search for and select Data Mask & Seed.

In a masking policy, Data Mask & Seed expedites policy creation by proactively identifying object fields assigned a non-public Sensitivity level, such as Internal, Confidential, or Restricted, as containing PII and automatically assigning these object fields with the appropriate masking (Mask With) option.

Note
Note

You can always assign your own choice of masking option for any policy object field.

Additionally, the Data Mask & Seed UI displays the Sensitivity column when viewing or editing a policy object. The column provides each object field's assigned sensitivity value.