> ## Documentation Index
> Fetch the complete documentation index at: https://help.maestra.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Advanced security

The **Advanced Security** provides extra security features for large businesses with special security requirements.

## **What is included**

## Masking personal data for specific users

This feature allows you to hide personal data from selected staff members.

<img src="https://mintcdn.com/maestraio/PtiXTG1opYow5MNd/images/imported/Advanced-security.png?fit=max&auto=format&n=PtiXTG1opYow5MNd&q=85&s=3280641760f7303f7ca31145592138ea" alt="" width="9944" height="4476" data-path="images/imported/Advanced-security.png" />

Personal data includes: full name, email, and phone number.
​

How to set up:

1. Go to the **Settings tab → Security → Security Policy** and enable **Hide customer personal data**.

<img src="https://mintcdn.com/maestraio/UotOaR5FKMl5Tz3c/images/imported/Advanced-2Bsecurity-2B-281-29.png?fit=max&auto=format&n=UotOaR5FKMl5Tz3c&q=85&s=4f6a9d753e0dd158f09e74cccbcc385d" alt="" width="11506" height="4636" data-path="images/imported/Advanced-2Bsecurity-2B-281-29.png" />

2. Control data visibility by granting or removing the **View and edit personal data** permission for the relevant staff or security groups.

<img src="https://mintcdn.com/maestraio/UotOaR5FKMl5Tz3c/images/imported/Advanced-security--282-29.png?fit=max&auto=format&n=UotOaR5FKMl5Tz3c&q=85&s=3bde3d5c323a9fbe5e7aa65938aabe82" alt="" width="22659" height="10461" data-path="images/imported/Advanced-security--282-29.png" />

For more flexible control, assign the ***Unmask personal data*** permission to a user.

This allows them to view customer data on the customer’s page.

<img src="https://mintcdn.com/maestraio/UotOaR5FKMl5Tz3c/images/imported/Advanced-security--283-29.png?fit=max&auto=format&n=UotOaR5FKMl5Tz3c&q=85&s=85325eef25a1fdc58ec6e77c7d82c68f" alt="" width="8733" height="5466" data-path="images/imported/Advanced-security--283-29.png" />

Every use of this feature is recorded in the event log.

<img src="https://mintcdn.com/maestraio/PtiXTG1opYow5MNd/images/imported/Advanced-security--285-29.png?fit=max&auto=format&n=PtiXTG1opYow5MNd&q=85&s=d7d7c9067838ef1521ec195274a69f46" alt="" width="11486" height="3876" data-path="images/imported/Advanced-security--285-29.png" />

<Note>
  Note: **Export restrictions** can be set without Advanced Security. Simply remove the **Export personal data** permission from staff or security groups.
</Note>

## **Restricted access by IP**

This feature allows staff to log in to the platform only from specific IP addresses.

To enable it, provide your Mindbox manager with a list of trusted IP addresses.

Once added to the platform’s web server, access to the project will be allowed only from these addresses.

## **Exporting events to SIEM (Security Information and Event Management)**

This allows you to **regularly export logs** from the event log, which records:

* Project logins with IP addresses
* Creation, editing, and deletion of campaigns, segments, customers, and other entities
* Export and import bulk tasks
* Changes to staff and permissions, and more.

<img src="https://mintcdn.com/maestraio/PtiXTG1opYow5MNd/images/imported/Advanced-security--286-29.png?fit=max&auto=format&n=PtiXTG1opYow5MNd&q=85&s=b6838c58f5a78970a6fb2ba44d59b32f" alt="" width="22401" height="12927" data-path="images/imported/Advanced-security--286-29.png" />

## **SSO — Single Sign-On**

This feature lets you manage staff access centrally.

Learn more about SSO [here](/security/single-sign-on-sso).

## **How to enable**

The Advanced Security is enabled by default and does not require an extra fee.
