TryBench
Local Redaction & Data Privacy
Scrub personal data locally first, and use AI redaction pipelines only with synthetic or pre-cleared text.
Why this matters
Pasting passwords or customer details into an outside AI tool can leak them. Learning to replace private details first keeps data safe.
Remove Private Data First
Never paste passwords or private details into an outside AI tool. Remove them on your own device first, using find and replace.
In real life: Once text leaves your device, you cannot take it back. The best habit is to remove private details on your own device before you use an outside tool.
Swap Private Details for Labels
Replace personal details with labels like [EMAIL], [PHONE], and [PASSWORD]. The message still makes sense, but the private part is gone.
In real life: A news article hides a victim's name as "a 34-year-old woman". The story still makes sense. Labels like [EMAIL] do the same job for private details.
Name Every Kind of Detail
A loose instruction like "clean this" misses things. Name each type to replace: names, emails, phone numbers, and passwords.
In real life: List every kind of detail by name. If you only say 'clean this up', the AI may miss some.
Your practice task
We are testing an automated redaction pipeline using synthetic test data. Instruct the model to rewrite the message below with the test email replaced by [EMAIL], the phone number by [PHONE], and the temporary password by [PASSWORD]. Keep all other text intact.
How to do it
- Read the test message above. It uses fake data on purpose.
- Ask the AI to rewrite it.
- Replace the email with [EMAIL], the phone with [PHONE], and the password with [PASSWORD].
- Say: keep everything else the same. Press Run proof.
Practice it for free in the app. You get instant checks that show what you got right and what to fix. A lesson takes about two minutes and you can try as many times as you like.
Quick reference: Local PII Redaction Rule
Always execute redaction on local/on-premise environments before transmitting text to third-party APIs.
Rewrite the text replacing emails with [EMAIL], phone numbers with [PHONE], and passwords with [PASSWORD]. Keep all surrounding context intact.
More lessons in this course
- Spotting Fake EmailsDetect sender mismatches, artificial urgency, and scam links with AI triage.
- MFA Fatigue Attack: How to Stop Push BombingRecognize push bombing, advise users to deny prompts, alert IT to revoke sessions, and implement number matching.
- Enforcing Least PrivilegeAudit staff permissions in a markdown table and downgrade excessive admin rights.