Privacy Modes

Ontology reads have three privacy levels: full, masked and anonymous. The level controls how personal data (PII) appears in the response. Doris applies the level on the server, before the data leaves Doris.

Surface	Level
Ontology API	You choose with `?privacy=`. The default is `full`.
MCP server	Always `masked`. You cannot change it.
Demo sandbox	Always `masked`.

Levels

full
masked
anonymous

Doris returns every field as stored.

{
  "full_name": "Adam Cross",
  "email": "adam.cross@minesoft.com",
  "phone": "+44 7700 900123",
  "linkedin_url": "https://linkedin.com/in/adamcross"
}

Doris shortens names to initials after the first name. It keeps the first character and the domain of an email. It keeps the last 4 digits of a phone number. It removes LinkedIn URLs and message text.

{
  "full_name": "Adam C.",
  "email": "a***@minesoft.com",
  "phone": "+** **** **0123",
  "linkedin_url": null
}

Doris removes all identity. Stakeholders get a role label, for example “Champion #1”. People in search results become “Contact #1”, “Contact #2” and so on. The emails expand key is removed from the response.

{
  "title": "Champion #1",
  "email": null,
  "phone": null,
  "linkedin_url": null
}

Fields

Field	`masked`	`anonymous`
`full_name`	First name and initials: `Adam C.`	Removed
`email`	`a***@minesoft.com`	Removed
`phone`	Last 4 digits: `+ 0123`	Removed
`linkedin_url`	Removed	Removed
`owner_name`	Kept on deals. Initials on other types.	Removed
`owner_email`	Kept on deals. Masked on other types.	Removed
`sender`	First name and initials	Removed
`sender_email`	`a***@domain.com`	Removed
`preview`, `body_preview`, `body_text`	Removed	Removed
Custom fields that your workspace marks as PII	Removed	Removed

“Removed” means the field comes back as null.

At masked, owner_name and owner_email stay visible on deal records only. A deal owner is a member of your team, and you need to see who owns a deal.

The same rules apply to expanded data. For example, the names and emails in the stakeholders of a deal are masked.

Use the API parameter

Add privacy to the query string. The default is full. An unknown value also gives full.

# Masked
curl "https://server.meetdoris.com/api/v1/ontology/deal/$DEAL_ID?expand=stakeholders&privacy=masked" \
  -H "Authorization: Bearer $DORIS_API_KEY"

# Anonymous
curl "https://server.meetdoris.com/api/v1/ontology/search?q=pricing&privacy=anonymous" \
  -H "Authorization: Bearer $DORIS_API_KEY"

These five endpoints take privacy:

Endpoint
`GET /search`
`GET /batch`
`GET /{type_name}`
`GET /{type_name}/{object_id}`
`GET /{type_name}/{object_id}/links`

GET /{type_name}/aggregate does not take privacy.

What masking does not cover

search_transcripts on the MCP server returns speaker names and transcript text as recorded. It does not apply a privacy level.
ontology_aggregate on the MCP server returns counts and measures. It does not apply a privacy level.

Get started

Using Doris

Automation

Admin & integrations

Developers

Changelog

Levels

Fields

Use the API parameter

What masking does not cover

​Levels

​Fields

​Use the API parameter

​What masking does not cover

Levels

Fields

Use the API parameter

What masking does not cover