Tokenize sensitive contact identifiers (PII vault)
Turns each sensitive identifier (email / phone / ssn / national_id) into a deterministic, tenant-scoped opaque token so profiles can be segmented, joined, and activated on tokens instead of cleartext PII (data-minimization / privacy-by-design). The same value always yields the same token for a tenant (so records for one person collapse to one segmentable key), but the token is a keyed pseudonym that cannot be reversed without the sealed envelope. Pass reversible: true to also receive a sealed envelope per token to store for later detokenize; the default returns tokens only and the cleartext is unrecoverable from the response. Values that are not valid identifiers of their type are skipped (counted, never echoed). The response never contains the cleartext value. Owner / admin / developer with the contacts:read scope.
Response
Successful response.