{"ref":"content:sap-cloud-integration-ci-cpi-reusable-script-collection-pattern-for-sensitive-da","page":"/content/sap-cloud-integration-ci-cpi-reusable-script-collection-pattern-for-sensitive-da","json":"/content/sap-cloud-integration-ci-cpi-reusable-script-collection-pattern-for-sensitive-da.json","generated":"2026-10-29","drafted_with_ai":true,"entity":{"id":"sap-cloud-integration-ci-cpi-reusable-script-collection-pattern-for-sensitive-da","title":"SAP Cloud Integration (CI/CPI) - Reusable Script Collection Pattern for Sensitive Data Masking","url":"https://community.sap.com/t5/technology-blog-posts-by-sap/sap-cloud-integration-ci-cpi-reusable-script-collection-pattern-for/ba-p/14403422","content_type":"blog","published_on":"source:sap-community","explains":[{"ref":"capability:data-privacy","applies_to":{"ecosystems":["btp"]}},"artifact:btp-cloud-integration"],"summary":"Opens with the question compliance teams ask about [Cloud Integration](artifact:btp-cloud-integration), whether an integration team based outside Europe with Message Monitoring access can read the personal data in a logged payload, and answers that in most standard configurations it can. The pattern against it is a reusable Groovy script collection plus one global variable holding the masking rules: a script near the start of an iFlow AES-encrypts the original payload into a header or property and replaces values in the body by value pattern first and field-name keyword second, a second script restores the original just before the sender, so a Log Payload step anywhere in the flow captures the masked body while the target system still receives the real data. The post names its own limits, that pattern-based masking is heuristic and that CPI trace can capture the payload before the scripts run, and grounds the pattern in GDPR Articles 5(1)(f), 25, 32 and 44-49, reading the EDPB's Guidelines 05/2021 to mean that access from a country without an EU adequacy decision, uncovered by Standard Contractual Clauses or another valid transfer mechanism, can itself constitute a cross-border transfer.","short":"Reusable scripts for masking sensitive data in Cloud Integration","author":"AdarshRao","published":"2026-05-25","provenance":{"discovered_via":[{"source":"source:sap-community","channel":"cloud-integration-tag"},{"source":"source:sap-community","channel":"integration-suite-tag"}],"first_seen":"2026-09-30"},"drafted_with_ai":true},"readings":{"liveness":[{"label":"Checked against the source","tier":"unknown","evidence":"nobody has checked it"},{"label":"Source reachable","tier":"unknown","evidence":"not crawled"},{"label":"Age","tier":"good","evidence":"published 5 months ago"}],"compatibility":[{"label":"Version","tier":"unknown","evidence":"no version declared"},{"label":"Moved since?","tier":"good","evidence":"no recorded change after 2026-05-25"},{"label":"Findings","tier":"good","evidence":"none flagged"}],"reach":[{"value":1873,"unit":"views"},{"value":0,"unit":"comments"},{"value":3,"unit":"likes"}]},"signals":{"views":1873,"likes":3,"comments":0,"metrics_at":"2026-10-25"},"series":null,"edges":{"authors":[]}}