Data masking in response processing with complex function?

Hello APIGateway experts,

we are currently running APIGW 10.7 and i want to ask, if it is possible to call a hash function (e.g MD5 ) from the data masking policy in the response processing phase.
The idea is to apply hashing of certain values identified by XPath expressions in the response payload (e.g. userId) in application/atom +xml content-type, in order to be GDPR compliant.
Simple replacing with a constant string (e.g. asterisk) is not possible as the hashed strings are used for referencing other entities.

How can this be achieved?

Hi Siegfried,
Data masking policy does not support function invocation. It only supports adding constants as replacements.

Regards.