Privacy-first erasure (default-on SaaS): clear derived index by id/phone; durable audit who/what/when + tenant scope. ≤30/hour/key → 429. Managed pointer only — not a legal deletion SLA.
E.3 Privacy-first redaction for managed SaaS. mode=anonymize|delete. Lookup by target_id or phone. Clears Person/Promise/Fact/partial index + Temsor audio pointers in your tenant only (no cross-tenant). Durable audit. Raw media stays on your side. Not a legal deletion SLA. List: GET /v1/pbx/redact/audit.
Credits per call: 1 · Operation id: pbx_redact
In the GET form every field is a query parameter; object and array fields are JSON-encoded.
Request
- Base URL: https://api.temsor.com
- URL: https://api.temsor.com/v1/pbx/redact
- Auth: one of:
- HTTP bearer
- API key in header x-api-key
Query parameters
Index document type. Optional when phone is set.
Document id (prm_, per_, call_, fact_).
Caller phone — finds Person phones (+ linked derived index).
Personal-data erasure reason.
anonymize (default) scrubs fields; delete removes docs.
Actor label for durable audit (defaults to pbx scope / demo-operator).
Response
Success
Changes
No recorded changes to this operation across all 1 revision of this API.