Sample report Log in

AI Anonymization Policy

Control whether on-prem Agent and Copilot can run on non-anonymized captures.

PacketSafari on-prem can enforce that AI runs use only captures anonymized with anoncap.

Default behavior

ON_PREMISES=true and ON_PREM_ALLOW_NON_ANON_AI=false (default):
- Agent and Copilot requests are blocked for captures that are not marked anoncap-anonymized.
ON_PREM_ALLOW_NON_ANON_AI=true:
- Agent and Copilot are allowed on non-anonymized captures.

The feature is intended for on-prem deployments only.

Admin control

You can configure this policy through the admin feature-flag controls or with environment variable aliases:

ON_PREM_ALLOW_NON_ANON_AI
PACKETSAFARI_ONPREM_ALLOW_NON_ANON_AI

Upload flow can run anoncap anonymization in the metadata step.
PCAP list actions can anonymize existing captures.