[fluidcruft]

My hope is it means it assigns coded identifiers and the key remains local. When the document returns, the identifiers can be restored. So the PII itself never leaves the premises.

[tjruesch]

that's exactly right. PII stays local (and the PII-Tag-Map is encrypted)