# pii-without-anonymize

Generated from the code · as of CLI 0.6.0

The CLI prints, for example:

```text
application `db` holds personal data and may be branched, with no anonymize rules — branching it would copy real personal data into a preview branch that developers and CI can reach. Declare rules, or set `branch: false`, or clear `contains_pii` if there genuinely is none
```

Fix it in: `arc.yaml`.

## Keys that raise it

- [`services.*.contains_pii`](https://docs.omniarc.eu/reference/arc-yaml/services.md#services-contains_pii)
- [`services.*.anonymize`](https://docs.omniarc.eu/reference/arc-yaml/services.md#services-anonymize)

**Example: shop/arc.yaml**

```yaml
arc: shop
edge: { service: web, port: 3000 }
resources: { cpu: "1", memory: 1Gi, disk: 5Gi }
services:
  web:
    kind: web-service
    contains_pii: false
  db:
    kind: database
    contains_pii: true
    anonymize:
      engine: postgres
      database: shop
      user: shop
      rules:
        - { table: customers, column: email, transform: fake-email }
```