Skip to main content

Dotset Border

Prevent PII from leaking through outgoing HTTP requests. Your application makes requests to third-party APIs every day — payment processors, analytics platforms, AI providers. Border intercepts these requests and automatically redacts sensitive PII before it leaves your server.
[!NOTE] Your data never leaves your machine. Border runs entirely inside your Node.js process. No proxy servers, no external dependencies. Learn more →

The Problem

PII leaks happen when sensitive data reaches destinations that shouldn’t have it:
ScenarioRisk
Sending customer SSN to an analytics providerGDPR/CCPA violation
Logging credit cards to an observability platformPCI-DSS breach
Passing API keys in AI promptsCredential exposure

The Solution

Border intercepts fetch() and http.request() calls, scans request bodies for PII, and redacts sensitive data before transmission:
import { init } from "@dotsetlabs/border";

init({
  destinationPolicies: [
    // Stripe can receive credit cards and emails
    { domain: "*.stripe.com", allowedPiiTypes: ["credit_card", "email"] },
    // AI providers should never get SSNs or credentials
    { domain: "*.openai.com", blockedPiiTypes: ["ssn", "credit_card", "api_key"] },
  ],
});

// Now all fetch() calls are automatically protected
await fetch("https://api.openai.com/v1/chat", {
  body: JSON.stringify({ text: "SSN: 123-45-6789" }), // → "[REDACTED_SSN]"
});

Key Features

20+ PII Types

Credit cards (Luhn validated), SSNs, emails, API keys, JWTs, IBANs, and more.

Blessed Destinations

Fine-grained control over what PII types can reach which domains.

Algorithmic Validation

Luhn checks, IBAN validation, SSN area codes — not just regex.

Audit Logging

Track every redaction with detailed metadata for compliance.

Quick Install

npm install @dotsetlabs/border

Next Steps