← Command Dashboard • Active Sessions • Identity Vault • Permission Matrix • Audit Explorer

Zero-PII Data Plane (§2.B)

Identity Vault & Blinded Search

FedRAMP Moderate Isolated Identity Architecture. Operational tables contain strictly zero PII.

Blinded Subject Search

Subject Email Address (Deterministic Blind Index Lookup)

Vault Principal Record

Principal ID: Masked Email: Principal Kind: Account Status: Identity Handle:

⚠️ Decrypted Clear PII (Audited Access)

Decrypted Email: Phone Number: Display Name: Revealed At (UTC):

Step-Up PII Reveal Authorization

Decryption of personal identity vault data generates a non-repudiable audit event.

Audit Justification Reason (Minimum 10 characters)

0 / 10 characters

Step-Up Confirmation Token