How does aggregation handle PII and other sensitive fields?

PII and other regulated fields are classified and either masked, redacted, or tokenized during aggregation per client policy. Sensitive values never reach the index in cleartext unless policy explicitly permits, and access to any cleartext is logged separately for audit. scale