---
title: Data Security and RBAC
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > LLM Observability > Data Security and RBAC
---

# Data Security and RBAC

{% callout %}
# Important note for users on the following Datadog sites: app.ddog-gov.com

{% alert level="danger" %}
This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site). ().
{% /alert %}

{% /callout %}

- [HIPAA-Eligible Services: Datadog Legal's list of HIPAA-eligible services](https://datadoghq.com/legal/hipaa-eligible-services)

## Data Access Control{% #data-access-control %}

LLM Observability allows you to restrict access to potentially sensitive data associated with your ML applications to only certain teams and roles in your organization. This is particularly important when your LLM applications process sensitive information such as personal data, proprietary business information, or confidential user interactions.

Access controls in LLM Observability are built on Datadog's [Data Access Control](https://docs.datadoghq.com/account_management/rbac/data_access) feature, which enables you to regulate access to data deemed sensitive. You can use the `ml_app` tag to identify and restrict access to specific LLM applications within your organization.

## Redacting data with span processors{% #redacting-data-with-span-processors %}

You can redact or modify sensitive data at the application level before it is sent to Datadog. Use span processors in the LLM Observability SDK to conditionally modify input and output data on spans, or prevent spans from being emitted entirely.

This is useful for:

- Removing sensitive information from prompts or responses
- Filtering out internal workflows or test data
- Conditionally redacting data based on tags or other criteria

For detailed implementation examples and usage patterns, see the [Span Processing section in the SDK Reference](https://docs.datadoghq.com/llm_observability/instrumentation/sdk/#span-processing).

## Sensitive Data Scanner integration{% #sensitive-data-scanner-integration %}

LLM Observability integrates with [Sensitive Data Scanner](https://docs.datadoghq.com/security/sensitive_data_scanner/), which helps prevent data leakage by identifying and redacting any sensitive information (such as personal data, financial details, or proprietary information) that may be present in any step of your LLM application.

By proactively scanning for sensitive data, LLM Observability ensures that conversations remain secure and compliant with data protection regulations. This additional layer of security reinforces Datadog's commitment to maintaining the confidentiality and integration of user interactions with LLMs.

## Further reading{% #further-reading %}

- [Learn more about data access controls](https://docs.datadoghq.com/account_management/rbac/data_access)