From 3fa688cff67c25aeb08a3facddbb9af92a2b55f0 Mon Sep 17 00:00:00 2001
From: franks883 <frankee.lee@flyform.com>
Date: Fri, 24 Oct 2025 21:01:20 +0100
Subject: [PATCH 1/2] Create README.md

---
 .../README.md                                 | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 Integration/Mail Scripts/Redact PII from outbound email body/README.md

diff --git a/Integration/Mail Scripts/Redact PII from outbound email body/README.md b/Integration/Mail Scripts/Redact PII from outbound email body/README.md
new file mode 100644
index 0000000000..b929b39b3e
--- /dev/null
+++ b/Integration/Mail Scripts/Redact PII from outbound email body/README.md	
@@ -0,0 +1,22 @@
+# Redact PII from outbound email body
+
+## What this solves
+Notifications sometimes leak personal data into emails. This mail script replaces common identifiers in the email body with redacted tokens before send.
+
+## Where to use
+Notification or Email Script record, Advanced view, "Mail script" field. Invoke the function to get a safe body string and print it.
+
+## How it works
+- Applies regex patterns to the email text for emails, phone numbers, IP addresses, NI number style patterns, and 16-digit card-like numbers
+- Replaces matches with descriptive placeholders
+- Leaves HTML tags intact by operating on the plain text portion you pass in
+
+## Configure
+- Extend or tighten patterns for your organisation
+- Toggle specific scrubs on or off in the config block
+
+## References
+- Email Scripts  
+  https://www.servicenow.com/docs/bundle/zurich-platform-administration/page/administer/notification/reference/email-scripts.html
+- Notifications  
+  https://www.servicenow.com/docs/bundle/zurich-platform-administration/page/administer/notification/concept/c_EmailNotifications.html

From fa0c8920b12a3485cbc8e679fd841636c5adeab8 Mon Sep 17 00:00:00 2001
From: franks883 <frankee.lee@flyform.com>
Date: Fri, 24 Oct 2025 21:02:19 +0100
Subject: [PATCH 2/2] Create mail_redact_pii.js

---
 .../mail_redact_pii.js                        | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 Integration/Mail Scripts/Redact PII from outbound email body/mail_redact_pii.js

diff --git a/Integration/Mail Scripts/Redact PII from outbound email body/mail_redact_pii.js b/Integration/Mail Scripts/Redact PII from outbound email body/mail_redact_pii.js
new file mode 100644
index 0000000000..c3c9f50cea
--- /dev/null
+++ b/Integration/Mail Scripts/Redact PII from outbound email body/mail_redact_pii.js	
@@ -0,0 +1,54 @@
+// Mail Script: Redact PII from outbound email body
+// Usage inside a Notification (Advanced view):
+//   var safe = redactPii(current.short_description + '\n\n' + current.description);
+//   template.print(safe);
+
+(function() {
+  function redactPii(text) {
+    if (!text) return '';
+
+    // Config: toggle specific redactions
+    var cfg = {
+      email: true,
+      phone: true,
+      ip: true,
+      niNumber: true,
+      card16: true
+    };
+
+    var out = String(text);
+
+    // Email addresses
+    if (cfg.email) {
+      out = out.replace(/\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi, '[redacted email]');
+    }
+
+    // Phone numbers (UK leaning, permissive, 7+ digits ignoring separators)
+    if (cfg.phone) {
+      out = out.replace(/\b(?:\+?\d{1,3}[\s-]?)?(?:\(?\d{3,5}\)?[\s-]?)?\d{3,4}[\s-]?\d{3,4}\b/g, '[redacted phone]');
+    }
+
+    // IPv4 addresses
+    if (cfg.ip) {
+      out = out.replace(/\b(?:(?:25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|1?\d?\d)\b/g, '[redacted ip]');
+    }
+
+    // National Insurance number style (AA 00 00 00 A) simplified - UK Specific
+    if (cfg.niNumber) {
+      out = out.replace(/\b([A-CEGHJ-PR-TW-Z]{2}\s*\d{2}\s*\d{2}\s*\d{2}\s*[A-D])\b/gi, '[redacted ni]');
+    }
+
+    // 16 consecutive digits that look like a card (permit separators)
+    if (cfg.card16) {
+      out = out.replace(/\b(?:\d[ -]?){13,19}\b/g, function(match) {
+        var digits = match.replace(/[ -]/g, '');
+        return digits.length >= 13 && digits.length <= 19 ? '[redacted card]' : match;
+      });
+    }
+
+    return out;
+  }
+
+  // Expose function to the mail template scope
+  this.redactPii = redactPii;
+}).call(this);