Layer content safety

Go beyond the built-in Prompt Guard patterns from Add guardrails and a budget: preserve context in masked data, catch free-form PII a regex cannot express, and layer a pre-call and post-call review on top of pattern matching. Field-level reference for every guardrail block is in Guardrails →.

GuideWhat you will achieve
Pseudonymize PII with NER IDsReplace matched PII with stable NER ID pseudonyms instead of a static placeholder, so a model can still reason over which values belong together, then restore the real values in the response.
Detect free-form PII with AI matchingAdd a model-backed PII detector to a surface so names, addresses, and other free-form values are caught even when no regex pattern matches them.
Block and re-review calls with Judge and JuryAdd a Judge pre-check that stops an unsafe request before the model is called, and a Jury post-review that can approve, block, or regenerate the response before it returns.