Recipient-specific masking of field values during signing, with full values on the completed document

Use case
We’re an ISV in financial services. We send multi-signer envelopes through the eSignature REST API for brokerage account documents (joint, trust and entity accounts). Each signer’s sensitive data (SSN/Tax ID, date of birth) is prefilled on a shared document that every owner or trustee signs.

Requirement

• Each signer should see their own sensitive values in full so they can confirm them.
• Every other signer on the envelope should see those values masked, for example ***-**-6789 for an SSN or the year alone for a DOB.
• The completed, signed document must contain the full, unmasked values. Custodians and back-office teams need the complete signed form to process the account.

Why existing features don’t meet it

• concealValueOnDocument (“Hide text with asterisks”) hides the value from other signers, but it also masks it on the completed PDF. The value can then only be retrieved from form data, and custodians won’t accept that.
• It isn’t supported on preFillTabs, and it masks the whole value with no option to show part of it.
• Default prefill visibility, or the “write initial value for all recipients” setting, controls when other signers see a value, not whether they see it. Signers later in the routing order still see earlier signers’ data.
• Document visibility works per document. Here, all owners sign the same page.

Requested enhancement
A tab-level property, such as maskForOtherRecipients, with an optional partial-mask pattern (for example, last 4 digits). The value is masked for every recipient except the tab’s assigned recipient during signing, and written in full to the completed document and certificate.

Impact
This applies to any regulated industry where several signers share one document and each signer’s PII must stay private from the others but complete on the executed record.