---
schema_version: "1"
id: 26722ebf680832d57f1433dea13c2aa9126c73d1d03c1d85dc30df89c45f0d42
title: A2A Personally Identifiable Information (PII) Detector Policy
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/1.9/policies-included-a2a-pii-detector.md
canonical_url: https://docs.mulesoft.com/gateway/1.9/policies-included-a2a-pii-detector
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 0332bea8de6b0279c88f802eb26563c39c1e9beb049722a3cb0861e2c4321238
description: MuleSoft Documentation Site
release: "1.9"
latest: false
---
---
product: Omni Gateway
version: 1.9
keywords: api gateway, flex gateway, gateway, policy
---

# A2A Personally Identifiable Information (PII) Detector Policy

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

<table><colgroup><col> <col></colgroup><tbody><tr><td><p><strong>Policy Name</strong></p></td><td><p>A2A PII Detector Policy</p></td></tr><tr><td><p><strong>Summary</strong></p></td><td><p>Detects personally identifiable information (PII) in requests sent to the agent</p></td></tr><tr><td><p><strong>Category</strong></p></td><td><p>A2A</p></td></tr><tr><td><p><strong>First Flex Gateway version available</strong></p></td><td><p>v1.9.3</p></td></tr><tr><td><p><strong>Returned Status Codes</strong></p></td><td></td></tr></tbody></table>

> [!NOTE] This policy supports Agent2Agent Protocol (A2A) version v0.3.0. To learn more about A2A
> versions, see [A2A Releases](https://github.com/a2aproject/A2A/releases).

## Summary

The A2A PII Detector policy detects personally identifiable information (PII) in requests sent to
the agent. If PII is detected, you can either log or block the request. A policy violation is always
reported if PII is detected.

## Configuring Policy Parameters

### Flex Gateway Local Mode

The A2A PII Detector policy isn’t supported in Local Mode.

### Managed Flex Gateway and Flex Gateway Connected Mode

When you apply the policy to your API instance from the UI, the following parameters are displayed:

<table><colgroup><col> <col></colgroup><thead><tr><th>Element</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>Entities</p></div></div></td><td><div><div><p>Array that defines the types of PII to detect. You can select multiple PII types. Supported values are <code>Email</code>, <code>US SSN</code>, <code>Credit Card</code>, <code>Phone Number</code>.<br>For more information, see <a href="#pii-types">PII Types</a>.</p></div></div></td></tr><tr><td><div><div><p>Action</p></div></div></td><td><div><div><p>Action to take when PII is detected. Supported values are <code>Log</code> or <code>Block</code>.</p></div></div></td></tr></tbody></table>

### PII Types

When you configure an A2A PII Detector policy, you can choose which types of PII to detect.

The following table describes the type of PII this policy can detect:

<table><colgroup><col> <col></colgroup><thead><tr><th>PII Type</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>Email</p></div></div></td><td><div><div><p>Standard email addresses such as <code>User.Name+tag@example.com</code></p></div></div></td></tr><tr><td><div><div><p>US SSN</p></div></div></td><td><div><div><p>United States Social Security Numbers (SSNs) in the standard format: <code>XXX-XX-XXXX</code> where each <code>X</code> is a digit. For example: <code>123-45-6789</code>.</p></div></div></td></tr><tr><td><div><div><p>Credit Card</p></div></div></td><td><div><div><p>Credit card numbers in the form of four groups of four digits, separated by optional spaces or hyphens. Examples: <code>1234-5678-9012-3456</code>, <code>1234 5678 9012 3456</code>, or <code>1234567890123456</code>.</p></div></div></td></tr><tr><td><div><div><p>Phone Number</p></div></div></td><td><div><div><p>United States phone numbers in various formats, with or without country code, parentheses, spaces, hyphens, or dots. Examples: <code>123-456-7890</code>, <code>(123) 456-7890</code>, <code>123.456.7890</code>, <code>+1 123 456 7890</code>, or <code>1234567890</code>.</p></div></div></td></tr></tbody></table>