Detects business and legal-entity registry identifiers: company registration numbers (UK Companies House, Australian ACN, Brazilian CNPJ, Japanese Corporate Number), business register numbers (Australian ABN, New Zealand NZBN, Polish REGON), entity tax/VAT registrations (EU VAT, India GSTIN, Turkish VKN), and the global Legal Entity Identifier (LEI). Useful for identifying documents about specific business entities in M&A, vendor onboarding, KYB, and procurement contexts.
Detects Australian Business Numbers (ABNs), which are unique 11-digit identifiers issued by the Australian Business Register to entities carrying on a business in Australia. ABNs are commonly formatted as groups of 2-3-3-3 digits separated by spaces or hyphens. The ABN includes a check digit mechanism, but this pattern relies on format matching combined with corroborative evidence rather than algorithmic validation.
Detects Australian Company Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects CNPJ patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects EU VAT identification numbers for all 27 member states in a single consolidated pattern, built branch-by-branch from the per-country structures published in the European Commission VIES FAQ (Q11). Covers the Greek quirk (Greece prefixes with EL, not GR) and Northern Ireland's XI prefix, which remains checkable in VIES for goods traders under the Windsor Framework — XI is included with the UK 9-digit, 12-digit and GD/HA government/health-authority forms; plain GB numbers are NOT included because Great Britain left the VIES scheme after Brexit. This pattern is a superset alongside the existing per-country detectors (at/be/de/fr/hu/it-vat-number), which stay untouched for deployed-GUID stability — the same document may fire both, following the global-iban / eu-iban precedent.
Detects ISO 17442 Legal Entity Identifiers (LEIs) — the 20-character uppercase alphanumeric codes issued under the Global LEI System (GLEIF) that uniquely identify legal entities in financial transactions. Structure: characters 1-4 are the LEI-issuer (LOU) prefix, characters 5-6 are reserved and set to "00", characters 7-18 are the entity-specific part, and characters 19-20 are numeric check digits (ISO 7064 MOD 97-10). Requiring the literal "00" at positions 5-6 and two digits at positions 19-20 makes the format far more distinctive than a generic 20-character alphanumeric run. Known recall cost: pre-2013 CICI-era legacy LEIs — interim identifiers issued before the "00" reservation, grandfathered into the GLEIF system and still live and checksum-valid — do not carry "00" at positions 5-6 and are NOT matched. This class includes major counterparties such as Microsoft (INR2EJN1ERAN0W5ZP974), Deutsche Bank (7LTWFZYICNSX8D621K86) and Apple (HWUPKR0MPOU8FGXBT394), so documents dealing with such entities' LEIs will be missed. This is a deliberate precision-over-recall trade-off: dropping the "00" anchor would widen the pattern to any 20-character uppercase alphanumeric run ending in two digits.
Detects India GST Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Japanese My Number Corporate patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. The Corporate Number (法人番号) is a 13-digit identifier assigned to corporations and organisations in Japan by the National Tax Agency.
Detects New Zealand Business Numbers (NZBNs) — the 13-digit universal business identifier administered by MBIE. Every NZBN is a GS1 Global Location Number (GLN): the first two digits are 94 (the GS1 prefix identifying New Zealand entities), the next ten digits are the business entity identifier, and the final digit is a GS1 mod-10 check digit. A bare 13-digit run has a phone-number-sized collision surface (NZ mobile/landline numbers, card fragments, timestamps), so every tier requires the number to be directly attached to an NZBN label — label-embedded-in-regex counts as label gating per the D1 decision record. There is deliberately no bare unlabelled tier.
Detects REGON patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects the Turkish tax identification number (Vergi Kimlik Numarası, VKN) issued by the Turkish Revenue Administration (Gelir İdaresi Başkanlığı, GİB). The VKN is a 10-digit number structured as a 3-digit alpha group code (001-999), a 6-digit sequence number and a single check digit. Since 1 July 2006 Turkish citizens use their 11-digit T.C. Kimlik Numarası as their tax number (covered by the separate tr-national-id pattern); the 10-digit VKN remains the tax identifier for legal entities, ordinary partnerships, foreign legal entities and foreign nationals without a Foreign Identity Number.
Detects UK Companies House company registration numbers (CRNs). A company number is always 8 characters: either 8 digits (England & Wales incorporations), a 2-letter jurisdiction/entity-type prefix followed by 6 digits (e.g. SC Scottish company, NI Northern Ireland company, OC/SO/NC LLPs, RC/SR/NR royal-charter bodies, FC overseas companies, OE overseas entities), or R0 + 6 digits (pre-partition Northern Ireland companies, registered under the R0 prefix). The prefix allow-list is taken from the Companies House Uniform Resource Identifiers (URI) Customer Guide plus the post-2011 additions CE/CS (charitable incorporated organisations), SG (Scottish qualifying partnerships), OE (Register of Overseas Entities, 2022), RS (registered societies, e.g. the live entry RS008375) and FE (further education / sixth form college corporations). Bare 8-digit runs collide heavily with invoice, order and account numbers, so the all-numeric form is only ever matched when directly attached to a company-number label; the more distinctive prefixed form additionally gets a keyword-gated tier without a directly-attached label. Two allow-list prefixes are excluded from that bare prefixed form because they collide with common document-number abbreviations — NO ("INVOICE NO123456") and SO (ERP sales-order numbers such as SO123456) — and are matched only via the label-attached regex.