Data privacy and security often focus on human-centered identities such as user accounts or employee details. However, organizations increasingly manage non-human identities like service accounts, machine credentials, APIs, and IoT devices. These identities can hold equal, if not greater, risk if left unmasked in environments where data access is shared