US PII / SSN Field

Encrypt and mask SSN & bank fields, role-based reveal with full access audit and a state breach-notification helper.

Key Features

Authenticated encryption (HMAC-SHA256 stream cipher) of SSN

Authenticated encryption (HMAC-SHA256 stream cipher) of SSN and bank fields, stored as tamper-evident ciphertext -- no plaintext ever touches the column.

Masked display everywhere (XXX-XX-1234); configurable visibl

Masked display everywhere (XXX-XX-1234); configurable visible digits.

Role-based access

a "View Masked" group and a "Privacy Officer" group that alone may reveal, set or clear values.

Immutable, append-only PII access log capturing who viewed/r

Immutable, append-only PII access log capturing who viewed/revealed/updated each value, when, and the mandatory business justification.

Guided reveal wizard that forces a reason before

Guided reveal wizard that forces a reason before any full value is shown.

SSN structural validation (area/group/serial, 000/666/900-99

SSN structural validation (area/group/serial, 000/666/900-999 guards).

State breach-notification rule library with statute citation

State breach-notification rule library with statute citations and deadlines for California, New York, Texas, Florida and more.

Breach incident workflow

assess -> notify -> close, with automatic deadline, AG-threshold and credit-bureau obligation calculation.

One-click generation of a statute-aware customer notificatio

One-click generation of a statute-aware customer notification letter.

Integrity self-check that re-verifies every stored ciphertex

Integrity self-check that re-verifies every stored ciphertext tag.

Use Cases

✓HR, payroll and finance teams in the US that store SSNs or bank details.

✓Compliance and privacy officers who must prove who accessed sensitive data.

✓Any organization that needs a defensible, audited answer to a data breach.

Screenshots

US PII / SSN Field — Pii access log — Pii access log

US PII / SSN Field — Breach incidents — Breach incidents

US PII / SSN Field — Pii settings — Pii settings

US PII / SSN Field — State breach rules — State breach rules

Why Choose This Module

Social Security numbers and bank details end up scattered across contact records where anyone with contact access can read them in the clear. That is exactly the exposure US state breach-notification laws punish. This app locks those fields down: every SSN and bank account is encrypted at rest, shown only in masked form (XXX-XX-6789), and can be revealed only by a designated Privacy Officer -- with the reason recorded in an immutable audit log.

Specifications

Compatible: Odoo 18.0 / 19.0
License: OPL-1
Languages: English
Author: Pokutsoft
Dependencies: base, contacts, mail
Support: support@pokutsoft.com

Update date: 2026-07-05