Skip to main content
A Sensitive Data Protection (SDP) policy tells the Sensitive Data analyzer two things:
  1. What to look for — the inspect config (info types + minimum likelihood).
  2. What to do with findings — the de-identify config (transformation: redact, mask, replace with info type, …).
Agnes ships five default policies so common cases work out of the box; you author your own when those defaults are too broad or too narrow.

​
Default SDP policies

The “Default?” column marks the tenant default — used when no sdp_policy_id is specified on the analyzer or per request.

​
Authoring a custom SDP policy

In the dashboard at agnes.lasscyber.com/protection/sensitive-data:
  1. Click New SDP policy.
  2. Author the inspect config:
    • Name and description.
    • Add infoTypes from the Cloud DLP catalog. The full list is at cloud.google.com/sensitive-data-protection/docs/infotypes-reference.
    • Set minLikelihood (POSSIBLE, LIKELY, VERY_LIKELY). Higher likelihood = fewer false positives, more false negatives.
    • Optionally toggle includeQuote to receive the matched text verbatim alongside each finding.
  3. Author the de-identify config:
    • Name and description.
    • Pick a primitiveTransformation:
      • replaceConfig — replace with a static string (e.g. [REDACTED]).
      • characterMaskConfig — mask every char with a chosen char (e.g. *).
      • replaceWithInfoTypeConfig — replace with the info type label in brackets (preserves auditability).
      • redactConfig — fully remove the value (empty string).
  4. Bind the two configs into a policy with a name, description, and optional is_default flag.

​
Example: a clinical trials team

A team accepting patient narratives in an LLM workflow needs:
  • Strict PHI detection (HIPAA).
  • Replace findings with the info type label so analysts can audit which categories hit.
Inspect config:
De-identify config:
Then bind the two configs into a policy named “Clinical PHI” and mark it as the tenant default.

​
Likelihood and false positives

Cloud DLP’s likelihood scale (lowest to highest): VERY_UNLIKELY → UNLIKELY → POSSIBLE → LIKELY → VERY_LIKELY Recommended starting points: Bump the threshold up when an info type fires noisily. The shipped Government ID Protection policy uses LIKELY because U.S. identifiers (especially SSNs) trigger many POSSIBLE matches on unrelated 9-digit numbers.

​
Wiring it into a combined policy

Set the sdp_policy_id parameter on the dlp_analyzer (the server key for the Sensitive Data analyzer):
Or override per-request:
Use overrides to swap policies for different products or routes without authoring N copies of the combined policy.

​
Permissions

The relevant scopes are sdp:read, sdp:create, sdp:delete. Note that there is no in-place SDP update scope today; the dashboard edit flow re-creates and re-binds.

​
Limits and cost

  • Token limit: 1,000,000 tokens per request.
  • DLP timeout: 30 seconds.
  • Findings per request: 100 (Cloud DLP default; if your input exceeds this you’ll see truncation).
  • Cost: Cloud DLP pricing per content item inspected — see cloud.google.com/sensitive-data-protection/pricing.

​
Next