A financial services company deploys a customer-support agent in Azure AI Foundry. Compliance requires that any personally identifiable information (PII) such as account numbers and Social Security numbers appearing in user messages be detected and masked before the text is stored in conversation logs or passed to downstream analytics. The team wants a managed capability rather than building custom regex detection. Which Azure AI service capability should they integrate to meet this requirement?