Sensitive-Field Masking
Mask and vault PII fields with role-based reveal and full access logging
Lock down personally identifiable information across any model. Administrators register which model and field combinations are sensitive, choose a masking style, and grant reveal rights to specific groups. Every reveal is captured in an immutable access log — giving you the accountability trail UK GDPR demands, without any external service.
Key Features
Field policy registry
Pick any model and character field, set a masking strategy — full, partial, email, last-4 or fixed — and choose exactly which security groups are allowed to reveal it.
Role-based reveal with reasons
Authorised users reveal a value on demand via a wizard that prompts for a justification. Each reveal is logged with the user, timestamp, record reference and the reason given.
PII Vault
Optionally hold the true value separately from the masked display value, obfuscated at rest with a keyed transform so cleartext PII stays out of plain database reads and backups.
Immutable access log
A searchable, groupable access-log dashboard records every reveal. Configurable auto-purge removes old log entries in line with your retention policy.
Automatic PII field scanner
Scan the model registry for char and text fields whose name or label hints at PII — phone, email, VAT, IBAN, passport, national insurance, date of birth and more — and create policies for the ones not yet covered with one click.
Dependency-free & BYOK
Pure-Python masking helpers with no external services. Supply your own obfuscation key via a system parameter (bring-your-own-key) for stronger protection — you stay in control.
Screenshots
Access Log
Why Choose This Module
Odoo shows sensitive data to anyone with read access and keeps no record of who looked at it. This app adds the masking, role-based reveal and immutable audit trail that data-protection accountability requires — with no external SaaS, no per-record fees and no lock-in. The masking is pure Python and the optional vault uses a key you control.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: OPL-1
- Languages: English
- Author: Pokutsoft
- Dependencies: base
- Support: support@pokutsoft.com
Update date: 2026-07-02