← Graph

PII privacy when logging domain objects

question 1 connections

Audience follow-up on privacy implications of logging domain objects to third-party observability vendors. Callaghan answers: use Rails' parameter filter class, configure it with regex/strings for sensitive attribute names (email, credit card, etc.), and pipe all observability payloads through it in one central place rather than scattering filter_parameters throughout the code. Vendor-side redaction also exists but ideally PII shouldn't leave the app.

answer_summary
Use Rails parameter filter with a list of regex/strings; redact centrally in the observability pipeline. Vendor-side redaction is a backup — don't send PII over the wire.
question PII privacy when logging domain objects
asked_at
Follow-up on logging domain objects responsibly.

Provenance