ALL-365: Configure Neon PII anonymization rules for 60+ columns

completed

Priority: 1

Audit all domain Prisma schemas, identify PII columns, and build PostgreSQL Anonymizer masking rules for the demo branch.

Event Timeline

created

progress

Completed RDS→Neon migration for all 11 databases. Identity: 712 users/36 tables/384MB, Connect: 21 tables/843MB, Location: 61K locations/1.8GB, Signal: 7GB, Alert: 775MB, plus 6 smaller DBs. All verified. Ready for PII anonymization phase.

progress

PII anonymization rules deployed to 8 Neon databases. 59 columns masked: identity(23), location(10), lead(9), program(5), virtual_oem(3), device(2), signal(1), site(1). All rules verified via pg_seclabels. Destination DB not migrated to Neon yet. SQL script + docs saved to neon-pii-anonymization/.

progress

PII anonymization rules deployed. 59 columns masked across 8 Neon databases using PostgreSQL Anonymizer. Rules live and ready for anon.anonymize_database(). Deliverables: neon-pii-anonymization/anonymize_pii.sql + deploy.sh

progress

PII anonymization applied and verified across all databases. Zero real emails, zero real OAuth tokens remaining. Identity (712 users, 109K third parties), Connect (393K link sessions, 58 creds), Location (61K locations offset), Device (63K serial numbers), Lead (930), Program (7.4K enrollments), VirtualOEM (372 accounts) all scrubbed.

status_change

in_progress → completed