ElixirStatus
Read post

Protecting PII in Elixir Before It Reaches Logs, APIs, and LLMs

Obscura is an Elixir library for detecting and anonymizing PII at application boundaries before data reaches logs, outbound APIs, or LLM prompts. It offers three detection profiles: a dependency-light :fast profile using regex/parsers for structured identifiers (emails, phones, SSNs, IBANs), and :balanced/:accurate profiles backed by local NER models for prose entities like names and locations. Key features include nested map/list redaction, configurable anonymization operators (replace, mask, hash, pseudonymize), Phoenix Plug integration, Logger helpers, and an LLM pseudonymization workflow using reversible session vaults. The post also covers benchmark F1 scores across datasets, deployment considerations for multi-GB model assets, and explicit security limitations — Obscura reduces PII exposure risk but is not a compliance guarantee.

    #security#data-privacy#elixir
Jul 23•10m read time•From hfiguera.github.io
Post cover image
Table of contents
Start at the boundaryInstall ObscuraProtect structured data before an API callPut redaction before logging and instrumentationPseudonymize an LLM conversationUse model-backed recognition when the text is less structuredWhat the current measurements sayThe security boundary is larger than the libraryTry the complete workflow
101 Impressions
ElixirStatus's image
ElixirStatus

ElixirStatus offers insights into Elixir programming language, OTP framework, and functional program...

215 Followers

•

1.7K Upvotes

Would you recommend this post?

Copy link
WhatsApp
Facebook
X
New Squad
  • © 2026 Daily Dev Ltd.
  • Guidelines
  • Explore
  • Tags
  • Sources
  • Squads
  • Leaderboard