home / skills / jeremylongshore / claude-code-plugins-plus-skills / vercel-data-handling
This skill helps you implement Vercel PII handling, data retention, and GDPR/CCPA compliance across integrations, ensuring privacy-first data processing.
npx playbooks add skill jeremylongshore/claude-code-plugins-plus-skills --skill vercel-data-handlingReview the files below or copy the command above to add this skill to your agents.
---
name: vercel-data-handling
description: |
Implement Vercel PII handling, data retention, and GDPR/CCPA compliance patterns.
Use when handling sensitive data, implementing data redaction, configuring retention policies,
or ensuring compliance with privacy regulations for Vercel integrations.
Trigger with phrases like "vercel data", "vercel PII",
"vercel GDPR", "vercel data retention", "vercel privacy", "vercel CCPA".
allowed-tools: Read, Write, Edit
version: 1.0.0
license: MIT
author: Jeremy Longshore <[email protected]>
---
# Vercel Data Handling
## Overview
Handle sensitive data correctly when integrating with Vercel.
## Prerequisites
- Understanding of GDPR/CCPA requirements
- Vercel SDK with data export capabilities
- Database for audit logging
- Scheduled job infrastructure for cleanup
## Data Classification
| Category | Examples | Handling |
|----------|----------|----------|
| PII | Email, name, phone | Encrypt, minimize |
| Sensitive | API keys, tokens | Never log, rotate |
| Business | Usage metrics | Aggregate when possible |
| Public | Product names | Standard handling |
## PII Detection
```typescript
const PII_PATTERNS = [
{ type: 'email', regex: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g },
{ type: 'phone', regex: /\b\d{3}[-.]?\d{3}[-.]?\d{4}\b/g },
{ type: 'ssn', regex: /\b\d{3}-\d{2}-\d{4}\b/g },
{ type: 'credit_card', regex: /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g },
];
function detectPII(text: string): { type: string; match: string }[] {
const findings: { type: string; match: string }[] = [];
for (const pattern of PII_PATTERNS) {
const matches = text.matchAll(pattern.regex);
for (const match of matches) {
## Detailed Reference
See `{baseDir}/references/implementation.md` for complete data handling guide.
This skill implements Vercel-focused PII handling, data retention, and GDPR/CCPA compliance patterns. It provides detection, classification, redaction, and retention policy guidance for data flowing through Vercel integrations. Use it to minimize surfaced sensitive data and to automate cleanup and audit logging for regulatory needs.
The skill inspects request and log payloads for common PII patterns (emails, phones, SSNs, credit cards) and tags each finding with a classification. It supports configurable redaction and encryption rules, writes immutable audit entries to a database, and integrates with scheduled jobs to enforce retention and deletion policies. The implementation includes patterns for never-logging secrets, rotating tokens, and aggregating business metrics to avoid exposing raw identifiers.
Can this handle custom PII types?
Yes. You can extend the detection patterns with custom regexes or named detectors and map them to your classification rules.
How do retention jobs ensure safe deletion?
Retention jobs should run from a trusted scheduler, perform idempotent deletions or irreversible anonymization, and write immutable audit records showing what was removed and why.