Skip to main content
Mask mode replaces PII with placeholders before sending to OpenAI or Anthropic. The response is automatically unmasked before returning to you.

​
How It Works

1

Request arrives

Your app sends: "Write a follow-up email to Dr. Sarah Chen (sarah.chen@hospital.org)"
2

PII detected

PasteGuard finds: Dr. Sarah Chen (PERSON), sarah.chen@hospital.org (EMAIL)
3

Masked request sent

OpenAI/Anthropic receives: "Write a follow-up email to [[PERSON_1]] ([[EMAIL_ADDRESS_1]])"
4

Response masked

OpenAI/Anthropic responds: "Dear [[PERSON_1]], Following up on our discussion..."
5

Response unmasked

You receive: "Dear Dr. Sarah Chen, Following up on our discussion..."

​
When to Use

  • Simple setup without local infrastructure
  • Want to use OpenAI or Anthropic while protecting PII

​
Configuration

mode: mask

providers:
  openai:
    base_url: https://api.openai.com/v1

​
Masking Options

masking:
  show_markers: false
  marker_text: "[protected]"
OptionDefaultDescription
show_markersfalseAdd visual markers around unmasked values
marker_text[protected]Marker text if enabled

​
Response Headers

Mask mode sets these headers on responses: 
X-PasteGuard-Mode: mask
X-PasteGuard-Provider: openai
X-PasteGuard-PII-Detected: true
X-PasteGuard-PII-Masked: true
X-PasteGuard-Language: en
If the detected language wasn’t configured and fell back to fallback_language: 
X-PasteGuard-Language-Fallback: true

​
Streaming Support

Mask mode supports streaming responses. PasteGuard buffers tokens and unmasks placeholders in real-time as they arrive. 
stream = client.chat.completions.create(
    model="gpt-5.2",
    messages=[{"role": "user", "content": "Email Dr. Sarah Chen at sarah.chen@hospital.org"}],
    stream=True
)

for chunk in stream:
    # PII is already unmasked in each chunk
    print(chunk.choices[0].delta.content, end="")