> ## Documentation Index
> Fetch the complete documentation index at: https://domoinc-openapi-sync-dataflows.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# PII Vault Protection and Compliance

## Intro

Domo has partnered with Anonomatic to safely store, anonymize, mask, mine, redact and share sensitive Personally Identifiable Information (PII) data with 100% data accuracy and full international data privacy compliance. This allows you to upload your data that contains PII data with the information redacted so that it is never stored in Domo. For more information on PII, see What Constitutes PII?

<Frame>
  <img alt="Partnership.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIr.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=e8f585863d87b5ea0d33423035731113" width="310" height="53" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIr.png" />
</Frame>

Privacy compliance is accomplished through a process called Poly-Anonymization™. Poly-Anonymization involves taking any personal identifying pieces of information (name, gender, address, social security number, etc.) and swapping it out for an anonymous value (Poly-ID). This value is unique, inconsistent, unpredictable, and not hashed. After data anonymization has been completed, organizations can share the resulting data either internally or externally without the usual risk that would be associated with such activity. For more information on this process and on Anonomatic, visit their site
[https://anonomatic.com](https://anonomatic.com)
.

**Video - PII Vault Plugin For Domo Workbench - Introduction and Overview**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/eVMB7KriBK4" width="560" />

## Try it out

In order to test the PII Vault Protection and Compliance feature with Domo, you need to do the following:

* Create an Anonomatic Trial account.
* Download the Workbench plugin.

This free trial will let you upload 2,000 unique personal profiles and will last for 30 days.

<Note>
  **Note:**
  This feature is available
  *on demand and paid*
  .

  To request this feature be enabled,

  * Reach out to your Domo Customer Success Manager, Technical Consultant, or Account Executive.
  * If you do not have contact information for your CSM, TC, or AE, contact Technical Support. For information on how to contact Support, please see:
    [Getting Help](/s/article/360042922874)

  Depending on the feature, you may be required to complete training before you can use the feature.
</Note>

## Create an Anonomatic Trial account

In order to use the PII Vault Protection and Compliance feature with Domo, you will first need to create an account with Anonomatic.

**Video - How to Create a new PII Vault Trial Account**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/KeNWZ3kldPY" width="560" />

**To create an Anonomatic account,**

1. Navigate to
   [https://api.anonomatic.com/ui](https://api.anonomatic.com/ui)
   .

2. Click
   **Create New Account**.

   <Frame>
     <img alt="Create_New_Account.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIn.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=feb5b1ca18277c7d226690ec758e5237" width="238" height="284" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIn.png" />
   </Frame>

3. Fill out the registration information.

4. (Conditional) Under the
   **Subscription Type** dropdown select one of the following:

   To create a trial account, select **Trial Vault**.

   To create a regular account select **Standard Vault**. (If you choose this option, you will need to reach out to your Domo Account Executive for an **Activation Key**.)

   <Note>
     **Note:**
     If you select a Trial Vault it is fully functional and allows you to test all of the features. However, do NOT use any production data in this environment as the data can be wiped at any time.
   </Note>

5. Select the checkbox for
   **I accept the terms and conditions**.

   <Frame>
     <img alt="Register_Page.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIk.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=49843f122cbbb0125dc77937c8bb27c9" width="237" height="430" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIk.png" />
   </Frame>

6. Click
   **Subscribe**.

7. On the success page, click
   **Login**.

   <Frame>
     <img alt="Success_Page.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIh.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=39ab53670a8fcb4419cdadd987545f89" width="305" height="341" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIh.png" />
   </Frame>

8. A verification email will be sent to the email address you provided. You will need to click the link to verify your account before you can log in for the first time.

   <Frame>
     <img alt="Email_Verification.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIg.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=8247b757754d69b4b6947be2eb683b0b" width="381" height="252" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIg.png" />
   </Frame>

9. Enter your credentials.

10. Click
    **Login**.

11. Once you log in, you will receive a second email that will provide you with the
    **API Access URL**, **AccountId,** and **ApiKey** you need in order to use the vault.

## Download the Workbench plugin

In order to use the PII Vault Protection and Compliance feature with Domo, you will need to download the plugin for use inside of Domo Workbench.

**Video - How To Download PII Vault Plugin for Domo Workbench**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/08z9-4NUvws" width="560" />

**To download the Workbench plugin,**

1. Navigate to
   [https://github.com/AnonomaticInc/Domo](https://github.com/AnonomaticInc/Domo)
   .

2. (Conditional) Depending on the version of Workbench on your machine, you will select one of the following files:

   If you are using Workbench 5.0, you will select the file **PIIVaultDomoPlugin5.0.zip**.

   If you are using Workbench 5.1, you will select the file **PIIVaultDomoPluginWB5.1.zip**.

   <Frame>
     <img alt="Github_Links.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIp.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=fc0786d96d895f7b7aae69b6ad413997" width="1397" height="661" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIp.png" />
   </Frame>

3. Click
   **Download**.

   <Frame>
     <img alt="Download_File.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIj.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=3f628abe11014a69d1f35323a4d255dc" width="1646" height="605" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIj.png" />
   </Frame>

4. Once the file has been downloaded, open the file so that you can see the
   **PIIVaultDomoPlugin** folder.

5. In a separate file window, navigate to the following folder path on your PC:

   **This PC > OS (C:) > ProgramData > Domo > Workbench > Pipeline > AddIns**

   <Note>
     **Note:**
     This is the default file path that is created when Workbench is installed on your machine, if you selected a different file path when it was installed, you will need to navigate to where you saved it.
   </Note>

   <Note>
     **Note:**
     If the file doesn't appear in the folder, click
     **View**
     at the top of the explorer and then check the
     **Hidden Items**
     box.
   </Note>

6. Click and drag the
   **PIIVaultDomoPlugin** folder into the **AddIns** folder.

7. The plugin will now be available inside of your Domo Workbench.

## Using PII Vault Protection and Compliance

Once you have created an account with Anonomatic and downloaded the Domo Workbench plugin, you can create a Workbench job to upload the data. You have two options for handling the PII data, it can be Redacted or Masked.

### PII Vault with Data Redaction

Using the PII Vault Protection and Compliance plugin with the Data Redaction method replaces all PII data with null values before uploading the data into Domo. The values are given a Poly Anonymous-Id that is used to reference the particular individual anytime they have data added to the database.

**Video - PII Vault Plugin Setup for Data Redaction**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/Xuz_wjLW2V0" width="560" />

**To use PII Vault Protection and Compliance with data redaction,**

1. Create a new job inside of Domo Workbench.
2. Select the data you would like to upload.

<Note>
  **Note:**
  If you are doing a database query, be sure to use an Order By statement on the unique ID field for the individual.
</Note>

3. Under the
   **Transforms** section, select **PIIVault Transform**.

4. Click the
   **+** icon.

5. Under the
   **PII Vault Parameter Value** type **Redact**.

   This will replace the data with null values.

   <Frame>
     <img alt="Redact_Job.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIi.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=ea60595cc17c0337207961511bd6e844" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIi.png" />
   </Frame>

6. Click the
   **Configure PII Vault Connection** button.

   <Frame>
     <img alt="Redact_Configure_Connection_Button.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIm.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=5d117caa733cac010a535487379e35d1" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIm.png" />
   </Frame>

7. Enter the
   **PII Vault URL**.

8. Enter the
   **PII Vault Account Id**.

9. Enter the
   **PII Vault API Key**.

   <Frame>
     <img alt="PII_Vault_Connection.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=ff98124f635307bc8718c659bb63bec9" width="1004" height="530" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png" />
   </Frame>

   <Note>
     **Note:**
     The PII Vault URL, Account Id, and API Key will be emailed to you once you set up your account with Anonomatic. To create an account, see
     [Create an Anonomatic Trial account](#h_01FHXCNZ9GJN49H884WPF1M77N)
     .
   </Note>

10. Click
    **OK**.

11. Click the
    **Configure Schema** button.

    <Frame>
      <img alt="Redact_Configure_Schema.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIl.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=8125a72c9dc4e8bea0d2e572097993ac" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIl.png" />
    </Frame>

12. Under the
    **Column Type** field for each column, select what type of PII data it contains (if applicable.)

    <Frame>
      <img alt="Schema_Definition.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIc.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=3d22666b80274f45152b68b31d4f4dc3" width="828" height="523" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIc.png" />
    </Frame>

    <Note>
      **Note:**
      There must be one column set to
      **Unique Key to Individual**
      that must be a consistent value that you use to identify an individual whenever data is uploaded about them.
    </Note>

<Tip>
  **Tip:**
  There is an option for
  **Non-PII Data Field**
  however, this does not need to be selected for each non-PII column. If the selection is left blank, it defaults to the Non-PII Data Field option.
</Tip>

13. (Optional) Set the
    **Column Type Group** field.

    This option is used when there are multiple addresses (mailing or email such as a personal and a work address) associated to a single individual. You would set all of the secondary address information to another group so that the plugin knows how to anonymize the data while keeping the addresses separate.
14. Click the checkbox next to the columns you want to be Redacted.
15. Click
    **OK**.
16. Click
    **Apply**.
17. **Save**
    and **Run** the job.

### PII Vault with Data Masking

Using the PII Vault Protection and Compliance plugin with the Data Masking method replaces all PII data with non-identifying fake values. This gives the appearance of real values for your data, without actually containing PII data. The values are not given a Poly Anonymous-Id as they are assigned fake data that is unique to that individual.

**Video - PII Vault Plugin Setup Data Masking**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/dVQ6vVdPDN8" width="560" />

**To use PII Vault Protection and Compliance with data masking,**

1. Create a new job inside of Domo Workbench.
2. Select the data you would like to upload.

<Note>
  **Note:**
  If you are doing a database query, be sure to use an Order By statement on the unique ID field for the individual.
</Note>

3. Under the
   **Transforms** section, select **PIIVault Transform**.

4. Click the
   **+** icon.

5. Under the
   **PII Vault Parameter Value** type **Mask**.

   This will replace the data with non-identifying fake values.

   <Frame>
     <img alt="Mask_Job.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIq.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=303a6280c37a8de5406cd8f45848e3e2" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIq.png" />
   </Frame>

6. Click the
   **Configure PII Vault Connection** button.

   <Frame>
     <img alt="Mask_Configure_Connection_Button.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOId.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=60a0d232a0ea5645d33cb8d533920199" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOId.png" />
   </Frame>

7. Enter the
   **PII Vault URL**.

8. Enter the
   **PII Vault Account Id**.

9. Enter the
   **PII Vault API Key**.

   <Frame>
     <img alt="PII_Vault_Connection.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=ff98124f635307bc8718c659bb63bec9" width="1004" height="530" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png" />
   </Frame>

   <Note>
     **Note:**
     The PII Vault URL, Account Id, and API Key will be emailed to you once you set up your account with Anonomatic. To create an account, see
     [Create an Anonomatic Trial account](#h_01FHXCNZ9GJN49H884WPF1M77N)
     .
   </Note>

10. Click
    **OK**.

11. Click the
    **Configure Schema** button.

    <Frame>
      <img alt="Mask_Configure_Schema.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIf.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=b296a3cdb66bcc8d29e057dbbdcf1b55" width="1602" height="952" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIf.png" />
    </Frame>

12. Under the
    **Column Type** field for each column, select what type of PII data it contains (if applicable.)

    <Frame>
      <img alt="Schema_Definition.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIc.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=3d22666b80274f45152b68b31d4f4dc3" width="828" height="523" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIc.png" />
    </Frame>

    <Note>
      **Note:**
      There must be one column set to
      **Unique Key to Individual**
      that must be a consistent value that you use to identify an individual whenever data is uploaded about them.
    </Note>

<Tip>
  **Tip:**
  There is an option for
  **Non-PII Data Field**
  however, this does not need to be selected for each non-PII column. If the selection is left blank, it defaults to the Non-PII Data Field option.
</Tip>

13. (Optional) Set the
    **Column Type Group** field.

    This option is used when there are multiple addresses (mailing or email such as a personal and a work address) associated to a single individual. You would set all of the secondary address information to another group so that the plugin knows how to anonymize the data while keeping the addresses separate.
14. Click the checkbox next to the columns you want to be Masked.
15. Click
    **OK**.
16. Click
    **Apply**.
17. **Save**
    and **Run** the job.

## Anonymous Data Matching

The PIIVault Reader Plugin allows you to link users together from different sources. You configure what fields need to match (such as name and email) in order to prove two records are the same individual.

**Video - Anonymous Data Matching Conceptual Overview**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/hr9Wj2Nluik" width="560" />

**Video - Anonymous Data Matching Plugin Configuration**

<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube-nocookie.com/embed/AnpBsMPRuXc" width="560" />

**To use PII Vault Protection and Compliance with anonymous data matching,**

1. Create a new job inside of Domo Workbench.

2. Set the
   **Source** as **PIIVault Provider**.

   <Frame>
     <img alt="Source_Information.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIo.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=c31181f06e9f1e94c9eb69b3015211b5" width="978" height="734" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIo.png" />
   </Frame>

3. Click the
   **Configure PII Vault Connection** button.

4. Enter the
   **PII Vault URL**.

5. Enter the
   **PII Vault Account Id**.

6. Enter the
   **PII Vault API Key**.

   <Frame>
     <img alt="PII_Vault_Connection.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=ff98124f635307bc8718c659bb63bec9" width="1004" height="530" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIb.png" />
   </Frame>

   <Note>
     **Note:**
     The PII Vault URL, Account Id, and API Key will be emailed to you once you set up your account with Anonomatic. To create an account, see
     [Create an Anonomatic Trial account](#h_01FHXCNZ9GJN49H884WPF1M77N)
     .
   </Note>

7. Click
   **OK**.

8. Click the
   **Configure Accounts to Match** button.

9. Enter the
   **Account Id** for each account you would like to match.

10. Enter an
    **Account Name** to list which account the match came from.

    <Frame>
      <img alt="Accounts_to_Match.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIe.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=ea99da20f58db9bc579f71c409b56477" width="668" height="592" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIe.png" />
    </Frame>

11. Click
    **OK**.

12. Select the
    **Configure Matching Criteria** button.

13. Enter a
    **Test Name**.

14. Select the
    **Confidence Level**.

15. Enter the
    **Test Criteria**.

    <Frame>
      <img alt="Matching_Criteria.png" src="https://mintcdn.com/domoinc-openapi-sync-dataflows/6RkB_PbKEcYlGecr/images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIs.png?fit=max&auto=format&n=6RkB_PbKEcYlGecr&q=85&s=4d8b1ecc1185f3d2a423872585f668af" width="1076" height="820" data-path="images/kb/ka05w00000123U5-00N5w00000Ri7BU-0EM5w000005vOIs.png" />
    </Frame>

16. Click
    **Validate Tests**.

17. Click
    **OK**.

18. Click
    **Apply**.

19. Set
    **Processing** as **PIIVault Reader**.

20. Set the
    **Data Type** as **Workbench CSV**.

21. **Save**
    and **Run** the job.

## FAQ's

As more plugins become available, they will be added to the YouTube Playlist found [here](https://www.youtube.com/playlist?list=PL9Dt2EnZSLIXExIExE9Z8v-jFi2_Xn7w0).
