Entity data can now be returned with PII removed: an optional anonymize query parameter was added to the entity read endpoints (GET /v1/entity/{slug}/{id} and its v2/v3 variants, plus the activity, changesets, relations, /v1/entity/activity/{id}, and /v1/entity:autocomplete operations), and an optional anonymize request-body flag was added to POST /v1/entity:search, :list, and :export; when true, identifiers such as names, emails, phone numbers, and IBANs are replaced with deterministic pseudonyms (anonymization is forced regardless of the flag when the access token was created with anonymize: true)
New optional data_classification field (pii or public) added to every entity schema attribute type — returned by the schema endpoints and settable via POST /v1/entity/schemas/attributes — where pii always anonymizes the attribute value in anonymized responses and public never does, overriding the built-in defaults