Apache NiFi and Philter
How to use Philter to redact PII and PHI inside an Apache NiFi data flow, either through Philter's API or with an embedded NiFi processor.
Get help with Philter, the self-hosted PII redaction API: deployment and operations guides, the documentation, and how to reach support.
Installation, configuration, and every setting, in the Philter user guide.
Read the Philter docsFile a bug, request a feature, or ask a question in the public issue tracker. The engineers who wrote the code answer there.
Open the issue trackerA commercial license includes direct email support at support@philterd.ai. Please do not send PII or PHI.
Use the contact formNew to Philter? See what it does.
How to use Philter to redact PII and PHI inside an Apache NiFi data flow, either through Philter's API or with an embedded NiFi processor.
How to configure a Philter deployment for HIPAA: encryption of data at rest and in motion across AWS, Azure, and Google Cloud.
How to deploy Philter in AWS with a CloudFormation template: finding the Philter AMI, editing the template, and launching the stack.
How to replace Philter's self-signed certificate with one signed by a trusted authority, using a PKCS12 keystore and two settings.
How to run an Apache reverse proxy in front of Philter for SSL termination, access control, and access logging.
How to monitor Philter in AWS: CloudWatch Logs for its log, load balancer health checks for availability, and its Prometheus metrics.
A how-to for redacting national and financial IDs (SIN, CPF, DNI, IBAN, BIC, and more) with checksum-validated patterns that reject look-alikes.
Amazon Kinesis Firehose is a managed streaming service that moves data from sources to destinations like S3 and Redshift. This post redacts PII in that stream.
How to configure a Valkey cache so Philter maintains referential integrity (consistent replacement values) across documents and contexts in a cluster.
How to call Philter from a Microsoft Power Automate (Flow) automation to redact PII and PHI from text, using a simple HTTP action.
A hands-on walkthrough from empty file to working redaction policy: detect an entity, apply it with Philter, change how it redacts, and handle false positives.
Reference architectures for running self-hosted Philter inside your own AWS, Azure, or GCP boundary, with no-egress and government-cloud variants.
What a redaction policy is, how the JSON schema is structured, and how to use it to control exactly which PII is detected and how each type is redacted.
How Philter addresses PIPEDA and Quebec's Law 25: self-hosted deployment for data residency, bilingual redaction, and Canadian identifier handling.