DataMasque for Guidewire Cloud

Ruleset Generation Configurations

Ruleset generation configurations map each discovered label to the mask used when generating a ruleset. Discovery configurations now cover only finding and classifying sensitive data, and existing ones are automatically migrated to companion generation configurations on upgrade.

Discovery Config Libraries

Discovery configurations can now share reusable blocks of labels, metadata rules, and In-Data Discovery rules through config libraries and imports, instead of duplicating the same definitions in every configuration.

Email Mask

A new email mask generates realistic email addresses deterministically, so the same address masks to the same value across tables. The ruleset generator now suggests it automatically for email columns.

Imitate Date Mask

A new imitate_date mask handles date and datetime columns that must stay unique. Every value maps to a different date within the column's own range, so primary key and unique columns can be masked without constraint violations.

List Comparisons for Conditional Masking

Conditional masking now supports in and not_in comparison types, matching a column value against a list instead of chaining multiple equals conditions.

Direct Import of Generated Rulesets

Generated rulesets can now be imported straight into DataMasque under a name prefix, without downloading a ZIP and uploading it again. DataMasque also sends a notification when ruleset generation finishes, including a download link.

Row Counts in Schema Discovery

Database schema discovery results and the discovery report now include row counts, with a row_count_method option to choose between estimated and exact counts. Row counts are captured only when In-Data Discovery is enabled.

File Size and Row Counts in File Discovery

File discovery results and the discovery report now include file size and row count for each discovered file.

Length-Preserving from_file Mask

The from_file mask gains a preserve_length option that prefers replacement values with the same character count as the original, avoiding overlapping or overflowing text in masked documents.

Amazon Aurora Resource Tagging

AWS resource tagging now covers Amazon Aurora. Aurora clusters are tagged after masking so the tags propagate to their snapshots, which requires additional IAM permissions on your tagging policy.

Breaking Change: Consolidated Ruleset Validation Errors

The validation_error, validation_error_type, and errors fields have been removed from the Ruleset and Ruleset Library API objects, replaced by a single structured validation_errors list. Scripts that read the old fields must be updated.

Broader Safe Data Preview Profiling

Safe Data Preview now profiles a JSON path or nested Parquet column from every data type found there, rather than just one.

Safe Data Preview Report Formatting

String Common Lengths values in the discovery report are now quoted, so Excel reads them as text instead of interpreting them as a time value.

More Reliable Fresh Installations

Container startup is now ordered so that shared storage is set up once, making fresh installations more reliable.

Ruleset Exports Include Library Seed Files

Ruleset exports now include seed files that are referenced only by an imported ruleset library.