---
title: "Enterprise DLP Local Redaction & DIFF Export Specimen"
category: "Data Loss Prevention (DLP)"
export_tool: "Noxport AI Exporter v1.2"
export_provenance:
  generator: "noxport-dlp-engine"
  mode: "local-first-redaction"
  timestamp: "2026-10-28T12:00:00Z"
  network_font_fetches: 0
  telemetry_calls: 0
  allow_complete_claim: false
  redacted_tokens_count: 4
  sha256_pre_redaction: "a1b2c3d4e5f60718293a4b5c6d7e8f90123456789abcdef0123456789abcdef0"
  sha256_post_redaction: "f9e8d7c6b5a43210fedcba9876543210abcdef0123456789abcdef0123456789"
---

# Enterprise DLP Local Redaction & DIFF Export Specimen

## Objective
Enterprise compliance policies (HIPAA, GDPR, SOC2) strictly prohibit sending unredacted customer data, API credentials, or internal intellectual property to external export APIs.

This specimen proves how Noxport executes regex-driven and heuristic PII redaction inside browser memory (WASM / WebWorker) before compiling Word (`.docx`), PDF, or Markdown files.

---

## 1. Redaction Diff Specimen

### Input Text (Inside Browser Memory Before Export)
```text
The customer contact for the incident was Jane Doe (j.doe@megacorp.internal, +1-555-0199).
Database credentials utilized during recovery: postgres://admin:s3cr3t_p@ssw0rd!@10.0.4.12:5432/finance.
Production API Key: sk-live-94819a0bc4ef71239847192847192847.
```

### Exported Output (Written to File)
```text
The customer contact for the incident was [REDACTED_NAME_1] ([REDACTED_EMAIL_1], [REDACTED_PHONE_1]).
Database credentials utilized during recovery: postgres://[REDACTED_USER]:[REDACTED_SECRET]@[REDACTED_IP]:5432/finance.
Production API Key: [REDACTED_API_KEY_1].
```

---

## 2. Redaction Audit Log (Bilateral Verification)

| Token ID | Pattern Type | Match Context | Redaction Strategy |
| :--- | :--- | :--- | :--- |
| `REDACTED_NAME_1` | Person Name Heuristic | "Jane Doe" | Replaced with deterministic label |
| `REDACTED_EMAIL_1` | RFC 5322 Email Regex | `j.doe@megacorp.internal` | Fully masked |
| `REDACTED_PHONE_1` | E.164 Phone Regex | `+1-555-0199` | Fully masked |
| `REDACTED_API_KEY_1`| OpenAI Secret Pattern | `sk-live-...` | Fully masked with entropy check |

---

## 3. Cryptographic Guarantee
No external HTTP request leaves the user's browser during redaction. All cryptographic hashing and regex matching occur client-side via the WebCrypto API.
Inspect the manifest contract at [/samples/noxport-export-integrity-manifest.json](/samples/noxport-export-integrity-manifest.json).