The Email framework masks string values by splitting the input on the @ symbol, independently masking the name and domain portions of the email address. Masked values are calculated algorithmically using the algorithm's key, so rekeying the algorithm will cause different outputs to be generated for each input. All inputs to this framework are valid and the framework will not generate non-conformant data events. Note that it is possible for chained algorithms specified for the Algorithm option to generate non-conformant data events.email algorithms

Malformed input handling

  • Inputs without an @ symbol: apply the name action to the entire input

  • Inputs with no name portion: apply the domain action to the entire input

  • Inputs with no domain portion: apply the name action to the entire input

  • Inputs with no name portion and no domain portion: return an @ symbol

  • Empty or null input: return input value

Configuration options

Option Description
Mask name with

Defines how the name portion (before @) is masked.

  • Unique Value: applies a SHA-256 hash of the entire input then Base32 encodes the hash value.

  • Lookup Value: applies a secure lookup using the values provided in the uploaded file or file reference.

  • Algorithm: applies the specified string type extensible algorithm.

  • The Unique Value option may produce masked name portions with lengths of up to 52 characters.

  • Multi Algorithm: applies specified string algorithms to first name and last name segments. Segments must precede the @ symbol and be delimited by email-allowed punctuation.
Mask domain with

Defines how the domain portion (after @) is masked.

  • Replacement Text: replaces the domain portion with a fixed value.

  • Algorithm: applies the specified extensible algorithm instance.

  • Preserve Value: does not mask domain portion.
Domain replacement

Replacement value used when the Replacement text option is selected for the domain.

  • Replacement Text: enter a value to replace the entire domain portion.

  • Algorithm: applies the specified extensible algorithm instance.
Error handling action

Defines how exceptions from chained algorithms are handled.

  • Exception: default action allowing exceptions from chained algorithms to be handled by global settings.

  • Character Mapping: masks the name or domain segment causing the exception with the CM Alphanumeric algorithm.

  • Preserve Value: returns the exception causing segment unmasked.
Filter character accent marks Removes accent characters before masking (for example, converting é to e). Selecting true will remove the accent from characters in the email address and replace them with the base Latin character prior to masking.

Example

Example configuration:

  • Mask name with: Lookup value

  • Mask domain with: Replacement text

  • Replacement text: example.com

Lookup file:

Amy
Bob
Jake
Katherine

Example outputs:

albert@delphix.com → Bob@example.com
albert@gmail.com → Bob@example.com
andrew_smith_123@delphix.com → Katherine@example.com

Example configuration using algorithms:

  • Name algorithm:FirstName

  • Domain algorithm: CM Alpha-Numeric

Example outputs: 

bob@gmail.com → alton@dqpnx.fsy
bob@hotmail.com → alton@poatzdw.bya
alex@gmail.com → jameel@dqpnx.fsy
joe_123@yahoo.com → miryam@wbpaq.kts

All inputs with the same value masked using the same configuration will produce the same output values.

Create an algorithm using this framework

To create an algorithm using this framework, follow the steps in Create an algorithm and select Email during the Configuration step.

Last updated
Oct 8, 2026