Intake pipeline for statements, ledgers, invoices, and loan files that must have account and identity information removed before review. Input is scrubbed at ingest — before storage, logs, or any model call — and a flagship redaction pass then adds what checksums cannot reach: partial account references, accountholder names in memo lines, and individual counterparties. Amounts, balances, and dates are deliberately preserved, because a ledger with its numbers masked cannot be reviewed at all.
Domain: finance