Hashing Sensitive Columns

Mark columns like emails, names, or IDs as sensitive so the AI never sees the raw value.

Mark a column as sensitive

In the table view, click the lock icon on any column header to toggle security modes.

How it appears

The AI receives a deterministic hash like HASH_a3f9 instead of the actual value. Equality and joins still work; the underlying string never leaves your machine.

Hashes are stable within a session, so the AI can still reason about repeated values ("HASH_a3f9 appears 4 times").

What your team sees

SQL history shows the real column names so your tech team can implement the same logic against the production database.

AI Exclusion

Beyond standard hashing, DashDraft implements a stricter mechanism called AI Exclusion for columns where even hashed values, matches, or joins are prohibited.

  • Strict Query Prevention: The AI is completely prohibited from selecting, reading, or referencing this column in any generated SQL queries.
  • Local Interception: If requested by the AI, the query is strictly intercepted and blocked locally on your machine prior to database execution.
  • Fully Reversible: Fully reversible at any time by toggling the column's exclusion status in your table options.