Masking personal data in the interface
Not everyone who works a ticket needs to see the whole card number, the whole phone number, or the whole address.
What masking does
Patterns that look like card numbers, national identifiers and similar data are partially hidden when displayed to staff without the permission to see them in full. The underlying data is unchanged.
Why it helps
It reduces what a compromised or curious account can harvest, and it demonstrates deliberate handling of personal data when a customer asks how you protect theirs.
Configuring it
Admin → Security → PII masking. Grant the unmasked permission only to the roles that genuinely need it, typically billing staff and administrators.