| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Lines of code | 884 |
| Technical Name |
gb_sensitive_field_masking_pii_vault |
| License | OPL-1 |
| Website | https://pokutsoft.com/ |
| Versions | 18.0 19.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Lines of code | 884 |
| Technical Name |
gb_sensitive_field_masking_pii_vault |
| License | OPL-1 |
| Website | https://pokutsoft.com/ |
| Versions | 18.0 19.0 |
Sensitive-Field Masking
Mask and vault PII fields with role-based reveal and full access logging
Lock down personally identifiable information across any model. Administrators register which model and field combinations are sensitive, choose a masking style, and grant reveal rights to specific groups. Every reveal is captured in an immutable access log — giving you the accountability trail UK GDPR demands, without any external service.
Key Features
Field policy registry
Pick any model and character field, set a masking strategy — full, partial, email, last-4 or fixed — and choose exactly which security groups are allowed to reveal it.
Role-based reveal with reasons
Authorised users reveal a value on demand via a wizard that prompts for a justification. Each reveal is logged with the user, timestamp, record reference and the reason given.
PII Vault
Optionally hold the true value separately from the masked display value, obfuscated at rest with a keyed transform so cleartext PII stays out of plain database reads and backups.
Immutable access log
A searchable, groupable access-log dashboard records every reveal. Configurable auto-purge removes old log entries in line with your retention policy.
Automatic PII field scanner
Scan the model registry for char and text fields whose name or label hints at PII — phone, email, VAT, IBAN, passport, national insurance, date of birth and more — and create policies for the ones not yet covered with one click.
Dependency-free & BYOK
Pure-Python masking helpers with no external services. Supply your own obfuscation key via a system parameter (bring-your-own-key) for stronger protection — you stay in control.
Screenshots
Access Log
Why Choose This Module
Odoo shows sensitive data to anyone with read access and keeps no record of who looked at it. This app adds the masking, role-based reveal and immutable audit trail that data-protection accountability requires — with no external SaaS, no per-record fees and no lock-in. The masking is pure Python and the optional vault uses a key you control.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: LGPL-3
- Languages: 35+
- Author: Pokutsoft
- Dependencies: base
- Support: support@pokutsoft.com
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module