Security, PII Scrubbing & PCI-DSS Compliance
Technical reference covering automated PII/PCI-DSS log redaction, data retention policies, encryption standards, and VAPT compliance packages.
🔒 Automated PII & PCI-DSS Log Redaction Engine
Sprint Log Parser features an inline, real-time PII & PCI-DSS Redaction Engine (PiiScrubberService). Incoming log payloads (Nginx request paths, query strings, headers, and Laravel context arrays) are automatically sanitized before database storage.
Redaction Patterns & Target Fields:
| Field / Data Type | Detection Criteria | Sanitized Output Format |
|---|---|---|
| Credit Card PANs | 13-19 Digit Visa, MC, Verve, Amex | 4111-XXXX-XXXX-1111 |
| Card Security Codes | cvv, cvc, security_code |
*** |
| Tokens & Credentials | password, bearer, secret, api_key |
[REDACTED_TOKEN] |
| Financial Identifiers | bvn, ssn, nin, account_number |
[REDACTED_FINANCIAL_ID] |
📅 Configurable Data Retention & Automated Pruning
Under PCI-DSS 4.0 Requirement 10.7, organizations must maintain log records for a minimum retention period (default baseline: 90 days).
Retention Worker Execution:
The platform executes a scheduled daily background command (php artisan logs:prune-expired) to purge log records older than the workspace's configured retention limit (7, 30, 90, 180, or 365 days).
📄 VAPT & PCI-DSS Architecture Export
Workspace administrators can generate signed, audit-ready compliance packages and security attestation certificates directly from the platform: