We’ve introduced a new Private Data gadget that allows you to securely store and manage sensitive information—such as Social Security numbers, credit card numbers, and driver’s license data—directly within your apps.  This feature is designed to help institutions meet higher security and compliance requirements while maintaining full visibility and control over who can access sensitive data.

Why this matters

Many institutions need to capture personally identifiable information (PII) but lack a secure, auditable way to do so. The Private Data gadget provides a safe, purpose-built solution that protects sensitive values while supporting everyday workflows.

Key capabilities

• Field-level encryption:  Private Data values are stored separately from other data and encrypted at the field level, adding an extra layer of protection beyond standard platform encryption.
• Flexible masking options:  Control how sensitive values appear throughout the application—including forms, emails, document lists, and PDFs. Choose from full masking or partial masking (such as showing only the last four digits).
• Controlled reveal access:  By default, saved private data is always hidden. Only users with the 'Reveal private data in this app' permission can temporarily reveal values, using a secure, time-limited reveal action.
• Audit-ready by design:  All Private Data activity is logged, including when values are entered, revealed, or when an unauthorized reveal attempt is made—giving you a complete audit trail.
• Security safeguards:  To prevent misuse, reveal actions are rate-limited per user and automatically re-mask after a short period.

Getting started with Private Data

• System Administrators must enable Private Data at the system or app level from Spaces & Settings (or System Settings for non-enterprise customers). By default, Private Data is disabled and set to None. You can enable it for all apps and products or limit it to specific apps and products, depending on your needs.
  
  
• Once Private Data is enabled for an app or product, App Administrators will see the Private Data gadget in the Advanced section of the gadget tray.
  
  
  Once added and published to a form, the field will appear to end users within the document, as shown below. Please note that the show/hide icon is available to the document initiator while the form is in an editable state, as well as to any user with the Reveal private data in this app permission.
  
  
• Within the Private Data gadget, you can configure several settings, including Data Type and Display Style which is specific to private data. The Data Type setting lets you choose between Social Security Number formatting or a generic entry for values such as driver’s licenses or credit card numbers. Display Style controls how the value appears throughout the app—whether it is fully masked or partially masked at the beginning or end of the input, with the option to specify how many characters remain visible.
  
  
• When Private Data is actively enabled in a form (or if a Private Data gadget has ever been published in the app) you’ll see a new Form Permission called Reveal private data in this app. This permission is disabled by default and must be explicitly added to the appropriate policies to allow users to view private data values.
  
  
• Lastly, we've added the below security warning messages when you enable private data from Spaces & Settings and when you add a Private Data gadget to a form to ensure users are aware of the implications.