What is Data Shield in FlowSharp and how does it protect sensitive data?

Data Shield is the sensitive data protection mechanism within FlowSharp flows. It solves one of the most critical problems in using AI in business contexts: how do you prevent confidential data from being inadvertently exposed to AI models or unauthorised users?

How it works:

Every data field in a FlowSharp item can be marked as sensitive by a FlowDesigner or Admin. This marking:

1. Blocks AI access — AI models configured in the flow never receive the value of that field, even when analysing the complete item. They see the field as empty or redacted.

2. Follows the data — if the item is copied, transferred to another flow or exported, the sensitivity marking is preserved. It is not possible to "wash" sensitivity by changing flows.

3. Respects roles — only users with the appropriate role (Operator or above, depending on configuration) can see the value in clear text. ReadOnly users never access sensitive data.

4. Tracked audit — every access to sensitive data is recorded in the timeline with user, timestamp and context.

Typical use cases:

• Tax data and tax codes
• Credentials and access tokens (the secret type in variables)
• Medical or legal information
• Payment data and IBANs