Privacy before AI
The model receives markers. You get your data back.
Rota Nacional masks detected personal data before the model and restores the values in the response.
The same information, in three steps
Fictional example. No real patient data.
-
1. Your text
Ana Souza · 452.198.736-28 -
2. At the model
[PESSOA_1] · [CPF_1] -
3. In the response
Ana Souza · 452.198.736-28
Your organization sets the policy
- Mask
- Sends markers to the model. Can restore values in the response, including streaming responses.
- Block
- Stops transmission when it detects personal data.
- Off
- Sends the original text. Requires an explicit choice by the organization.
Redaction is also available. An API request can strengthen the policy but cannot weaken it.
See what is protected
Documents and contact details use rules and validation. Names use context analysis. The response reports how many data items were masked and their categories.
Automatic detection can fail. Test examples from your use case before sending real data.
Is the replacement map stored?
It stays in request memory and is discarded at the end. It does not go to the model, logs or audit records. Content storage is a separate organization choice.
Does all inference stay in Brazil?
No. A route can use a provider abroad. External transmission requires organization consent, in addition to the privacy choice.
Can I keep markers in the response?
Yes. The API lets you turn restoration off per request. Text cleaning always returns processed content.
November 6, 2026 update: restoration in complete and streaming responses, more Brazilian document formats and masking counts.