Context:
We have multiple downstream systems that consume data from MongoDB. These systems are not capable of decrypting sensitive Personally Identifiable Information (PII) fields. Currently, to protect PII, data is encrypted in MongoDB, but downstream systems cannot process or display these fields without decryption, which poses operational challenges and security risks.
Request:
We would like MongoDB to provide a native field-level data masking feature that allows:
Masking or redacting sensitive fields (e.g., PII fields) at query time without requiring the consumer to decrypt the data.
The masking should allow downstream systems to receive the data in a protected form (e.g., partially masked or anonymized) while still enabling queries and aggregations on non-sensitive fields.
Flexible configuration so that masking policies can be applied dynamically based on user roles or query contexts.