--- title: Keeping Sensitive Data Out of Workflow History | daily.dev description: A developer advocate at Temporal walks through two patterns for keeping sensitive data out of Temporal's workflow history and UI. The first is payload... canonical: https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Keeping Sensitive Data Out of Workflow History | daily.dev og:description: A developer advocate at Temporal walks through two patterns for keeping sensitive data out of Temporal's workflow history and UI. The first is payload... og:url: https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y og:image: https://api.daily.dev/og/posts/lkOOlCC4Y.png og:image:alt: Keeping Sensitive Data Out of Workflow History og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Keeping Sensitive Data Out of Workflow History **[Temporal](https://daily.dev/sources/temporal)** · 23 min read · 0 upvotes · 0 comments ## Summary A developer advocate at Temporal walks through two patterns for keeping sensitive data out of Temporal's workflow history and UI. The first is payload encryption, where data is encrypted before being sent to Temporal and decrypted only by the worker, so Temporal never sees plaintext PII. A codec server browser plugin can be used for local debugging without exposing data to Temporal. The second is the claim check pattern for large payloads: instead of passing large files (images, video) through Temporal directly, they are uploaded to external storage (e.g., S3) and only a reference key is passed through the workflow. Combining both patterns keeps workflows lean and sensitive data protected. Demos use a pharmacy benefits management app written in C# with Python examples also referenced. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [How to protect sensitive data in a Temporal Application](https://daily.dev/posts/how-to-protect-sensitive-data-in-a-temporal-application-xpmwqv72a) · Temporal · 0 upvotes · 0 comments - [Temporal Is to Your Code What a Database Is to Your Data](https://daily.dev/posts/temporal-is-to-your-code-what-a-database-is-to-your-data-ezgifjhua) · Foojay.io · 1 upvotes · 0 comments - [How to Encrypt PII in Data Pipelines While Keeping It Searchable](https://daily.dev/posts/how-to-encrypt-pii-in-data-pipelines-while-keeping-it-searchable-rswqvqjnc) · freeCodeCamp · 3 upvotes · 0 comments --- Tags: [#encryption](https://daily.dev/tags/encryption), [#workflow-orchestration](https://daily.dev/tags/workflow-orchestration) [View this post on daily.dev](https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Keeping Sensitive Data Out of Workflow History","url":"https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y"},"datePublished":"2026-03-18T19:39:48.834Z","dateModified":"2026-03-18T21:27:00.186Z","description":"A developer advocate at Temporal walks through two patterns for keeping sensitive data out of Temporal's workflow history and UI. The first is payload...","image":"https://i.ytimg.com/vi/Pb0X13N4Z7g/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/Pb0X13N4Z7g/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Temporal","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Temporal","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/65290ca7e3ab46a7b1df76f2757800c2","url":"https://daily.dev/sources/temporal"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/keeping-sensitive-data-out-of-workflow-history-lkoolcc4y","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"encryption,workflow-orchestration","timeRequired":"PT23M","video":{"@type":"VideoObject","name":"Keeping Sensitive Data Out of Workflow History","description":"A developer advocate at Temporal walks through two patterns for keeping sensitive data out of Temporal's workflow history and UI. The first is payload...","thumbnailUrl":"https://i.ytimg.com/vi/Pb0X13N4Z7g/sddefault.jpg","uploadDate":"2026-03-18T19:39:48.834Z","duration":"PT23M","url":"https://api.daily.dev/r/lkOOlCC4Y","embedUrl":"https://www.youtube.com/embed/Pb0X13N4Z7g"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Temporal","item":"https://daily.dev/sources/temporal"},{"@type":"ListItem","position":3,"name":"Keeping Sensitive Data Out of Workflow History"}]} ```