Genesys Cloud enables automatic redaction of sensitive information from call recordings, voice, chat, and messaging transcripts through its Speech and Text Analytics capabilities. The feature requires specific licensing (CX 1 WEM Add-on II or higher), admin role access, and appropriate permissions for transcription and analytics settings. Organizations can activate automatic redaction by navigating to Account > Organization Settings and toggling either "Sensitive Data Redaction for Payment Cards" or "Sensitive Data Redaction for Personal Information" on or off. When enabled, the system automatically redacts Payment Card Industry (PCI) entities and personal information on a best-effort basis from recordings and transcripts where speech or text analytics is active. Payment card redaction covers credit/debit card numbers, expiration dates, CVV/CID codes, and associated person names, replacing them with standardized placeholders. Personal information redaction covers usernames, phone numbers, email addresses, person names, postal codes, passwords, locations, national identification numbers, and other PII such as license plate and bank account numbers. The transcript API response identifies and categorizes personally identifiable information through specific data types including card numbers, card expiry dates, national identification numbers (SSN), postal codes, phone numbers, person names, geographic locations, user information, and email addresses. National Identification Number coverage is limited to Australia, Canada, the UK, and the US. Locations are defined as countries, cities, and addresses, with all other sensitive data classified as PII. The system provides UI entity labels for each data category to facilitate sensitive data recognition and masking within voice transcripts and organization security compliance settings. Users with the "Recording > Recording > ViewSensitiveData" permission can access original unredacted recordings regardless of security settings, requiring explicit administrator authorization. Genesys recommends implementing Secure Pause or Secure Call Flows as primary defenses, as only these methods are validated as Level 1 PCI DSS compliant by external Qualified Security Assessors. Automatic redaction functions as a supplementary security measure rather than a standalone compliance solution.