Packages / Business And Operational Records
Commercial, operational, contractual, procurement, and internal business-sensitive records.
Detects Emirates Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Austria Value Added Tax (VAT) Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects populated compliance assessment and audit reports: the report title (compliance assessment / audit / review report, regulatory compliance assessment, gap analysis report) together with populated finding, control, status, rating and remediation fields.
Detects populated confidential research funding proposal using record context and corroborating fields.
Detects populated confidential university research invention disclosures: an invention disclosure / research commercialisation disclosure heading combined with labelled inventor, invention title or technical-description fields carrying real values. Phrase-only mentions (policy, process pages, news) stay discovery-only.
Detects Australian OTC electricity derivative and power purchase agreement confirmation content - documentation under the June 2006 Australian Electricity Addendum and 2005 ISDA Commodity Definitions, electricity swap/cap/floor/swaption confirmations settled against the AEMO regional reference price, and PPA confirmation phrasing with $/MWh fixed prices.
Detects Australian enterprise agreement and enterprise bargaining content under the Fair Work Act 2009 - agreement text and drafts (single-enterprise and greenfields agreements, nominal expiry, better off overall test), Fair Work Commission agreement codes (AE followed by six digits), and bargaining process artefacts (notice of employee representational rights, protected action ballots, logs of claims).
Confidential employer-side enterprise bargaining material produced before an agreement is made: bargaining position papers, wage offer costings, costed claims matrices (management response to a union or employee log of claims) and negotiation strategy briefs that record the approved mandate, fallback positions and trade-offs. Bargaining is conducted under Fair Work Act 2009 (Cth) Part 2-4 (s 172 making an enterprise agreement, s 173 notice of employee representational rights, s 228 good faith bargaining requirements, s 229 bargaining orders) and, for the Queensland public sector and local government, Industrial Relations Act 2016 (Qld) chapter 4 collective bargaining (s 169 notice of intention to bargain, s 173 parties must negotiate in good faith). Published enterprise agreements, Fair Work Commission approval decisions, union newsletters and news reports are decoys; au-enterprise-agreement-document covers agreement text.
Detects financial statements including profit and loss, balance sheets, and income statements.
Detects Australian mining technical records - JORC Code resource and reserve estimates (Measured/Indicated/Inferred resources, Proved/Probable reserves, Competent Person statements), drill-and-blast design parameters (blast patterns, powder factor, maximum instantaneous charge, stemming), pit geotechnical stability assessments, and spelled-out mining tenement grants.
Detects AEMO MSATS retail-market transaction content - aseXML transaction names (CATSChangeRequest, NMIDiscoveryRequest/Response, ServiceOrderRequest/Response, MeterDataNotification), CATS change-request codes (e.g. CR1000/CR1060, CR4050/1, CR5050/1), and role-coded NMI standing data (FRMP/LNSP/MDP with an NMI). These artefacts carry customer transfer, metering and consumption context regulated under the retail market procedures.
Detects AEMO NEM dispatch bid/offer submission artefacts - the MMS bidding table vocabulary (BIDDAYOFFER, BIDOFFERPERIOD, BIDOFFERFILETRK, MNSP day-offer tables), the Dispatch Bid/Offer Submissions JSON payload fields (energyBids, fcasBids, mnspBids, rebidExplanation), and the participant FTP bid filename convention (<PARTICIPANTID>_<x>BID<x>_<timestamp>.zip/.json). Pre-dispatch bids, price bands and rebid reasoning are commercially critical trading data for market participants.
Detects references to patents, intellectual property registrations, and IP Australia filings.
Detects Australian tax invoices containing GST, ABN, and payment details as required by ATO regulations.
Detects Belgium Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects Canada Revenue Agency (CRA) Business Numbers (BN). The core BN is nine digits assigned to a business. Program accounts append a two-letter program identifier (RC, RM, RP, or RT) and a four-digit reference, for example 123456789RC0001 for a corporate income-tax account.
Detects SIN patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Mainland China Unified Social Credit Codes (统一社会信用代码) assigned to legal persons and other organisations. The code is 18 characters using a restricted alphabet (digits and selected letters excluding I, O, Z, S, V), with an embedded administrative division code in positions 3-8.
Detects financial models for mergers, acquisitions, or divestments containing actual valuations, synergy estimates, deal structures, and price ranges. Disclosure constitutes insider information under securities law.
Detects Germany Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects DORA Article 6 ICT risk management framework documentation and the digital operational resilience strategy of financial entities — board-approved framework documents, risk tolerance statements, and internal audit reviews of the framework. These documents describe the entity's defensive architecture, control gaps, and risk appetite; disclosure hands attackers a map of weaknesses.
Detects DORA Article 19 major ICT-related incident reports — the initial notification, intermediate report, and final report submitted to the competent authority under Delegated Regulation (EU) 2025/301 and Implementing Regulation (EU) 2025/302 — and voluntary notifications of significant cyber threats. These reports detail live vulnerabilities, affected services, and root causes; premature disclosure aids attackers and can move markets.
Detects extracts and working copies of the DORA Article 28(3) register of information on contractual arrangements with ICT third-party service providers, including the ESAs' Implementing Regulation (EU) 2024/2956 template content (contractual arrangement reference numbers, provider LEIs, ICT service supply chain, critical or important function flags). The register maps a financial entity's entire ICT outsourcing estate and its concentration risk; disclosure exposes supplier dependencies and attack surface.
Detects NIS2 Article 21 cybersecurity risk-management measures documentation from essential and important entities — gap assessments, board approval papers, and the policies implementing the Article 21(2)(a)-(j) measures (incident handling, business continuity, supply chain security, cyber hygiene, cryptography, access control, multi-factor authentication). These documents catalogue an entity's security posture and unremediated gaps.
Detects NIS2 Article 23 significant-incident notifications from essential and important entities — the 24-hour early warning, 72-hour incident notification, intermediate report, final report, and progress report submitted to the CSIRT or competent authority. These filings contain live compromise details, indicators of compromise, and impact assessments; disclosure aids attackers and breaches supervisory confidentiality.
Detects EU VAT identification numbers for all 27 member states in a single consolidated pattern, built branch-by-branch from the per-country structures published in the European Commission VIES FAQ (Q11). Covers the Greek quirk (Greece prefixes with EL, not GR) and Northern Ireland's XI prefix, which remains checkable in VIES for goods traders under the Windsor Framework — XI is included with the UK 9-digit, 12-digit and GD/HA government/health-authority forms; plain GB numbers are NOT included because Great Britain left the VIES scheme after Brexit. This pattern is a superset alongside the existing per-country detectors (at/be/de/fr/hu/it-vat-number), which stay untouched for deployed-GUID stability — the same document may fire both, following the global-iban / eu-iban precedent.
Detects France Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects references to AI training data, model datasets, and data provenance documentation in Australian contexts.
Detects populated board papers and board resolutions: a board paper / board memorandum / board resolution phrase combined with populated paper metadata (paper number, agenda item, meeting date), a named author or sponsor, or a formal 'That the Board...' recommendation. Phrase-only mentions stay discovery-only.
Detects populated internal-control deficiency findings (control deficiency, significant deficiency, material weakness, ICFR weakness) that carry a finding reference, rating, accountable owner or remediation due date. Definitions and accounting guidance stay discovery-only.
Detects ICCID patterns.
Detects IMEI patterns.
Detects internal audit reports containing control assessments and organisational vulnerability findings.
Detects ISO 17442 Legal Entity Identifiers (LEIs) — the 20-character uppercase alphanumeric codes issued under the Global LEI System (GLEIF) that uniquely identify legal entities in financial transactions. Structure: characters 1-4 are the LEI-issuer (LOU) prefix, characters 5-6 are reserved and set to "00", characters 7-18 are the entity-specific part, and characters 19-20 are numeric check digits (ISO 7064 MOD 97-10). Requiring the literal "00" at positions 5-6 and two digits at positions 19-20 makes the format far more distinctive than a generic 20-character alphanumeric run. Known recall cost: pre-2013 CICI-era legacy LEIs — interim identifiers issued before the "00" reservation, grandfathered into the GLEIF system and still live and checksum-valid — do not carry "00" at positions 5-6 and are NOT matched. This class includes major counterparties such as Microsoft (INR2EJN1ERAN0W5ZP974), Deutsche Bank (7LTWFZYICNSX8D621K86) and Apple (HWUPKR0MPOU8FGXBT394), so documents dealing with such entities' LEIs will be missed. This is a deliberate precision-over-recall trade-off: dropping the "00" anchor would widen the pattern to any 20-character uppercase alphanumeric run ending in two digits.
Detects populated management action plans and corrective action plans that respond to audit findings: the action-plan phrase combined with a finding reference, a named action owner, a due date or an action status. Phrase-only mentions stay discovery-only.
Detects references to internal project or initiative codenames in the "Project <CODENAME>" / "Operation <CODENAME>" labelling style. The public form of this pattern carries fictional example codenames only - it is a customisation skeleton: deployments substitute their organisation's live codename list via the declared customisation, which is what gives the pattern real detection value.
Detects the header line of a PuTTY private key file (.ppk), as produced by PuTTYgen. The header begins with 'PuTTY-User-Key-File-' followed by the format version (2 or 3) and the SSH key algorithm. A leaked .ppk grants SSH access to whatever hosts trust the corresponding public key. Header-only candidates are discovery-only; ordered PPK metadata and the first public-blob line support enforcement.
Identifies populated risk registers, risk matrices and enterprise risk reports: risk IDs, rated likelihood/consequence/residual values and named risk owners. Titles alone are discovery-only.
Detects populated security audit and assurance reports (SOC 2 Type I/II, ISO/IEC 27001 audits, SSAE 18, IRAP and security control assessments) that carry finding/exception references, severity ratings, technical evidence (hosts, IPs, CVEs) or audit scope details. Phrase-only mentions stay discovery-only.
Detects Sarbanes-Oxley (SOX) and COSO internal control framework compliance documents.
Detects populated internal strategic plans, product/technology roadmaps and business cases: the plan/roadmap/business-case phrase combined with document-control fields, dated roadmap milestones or financial targets. Public strategy statements and phrase-only mentions stay discovery-only.
Detects technical design documents, system architecture specifications, and API documentation.
Identifies documents containing references to vendor master records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to purchase order records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bid and tender proposals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to contracted pricing schedules in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to third-party risk assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to supplier due diligence reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to customs declaration data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bills of lading in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to shipping manifest details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to inventory valuation reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bill-of-materials cost data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to service-level penalty records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to rebate agreement terms in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to channel partner margin agreements in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to sole-source justification memos in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to supplier performance scorecards in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to board meeting minutes in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to committee meeting minutes in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to ethics hotline case records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to policy violation findings in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to internal audit workpapers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to sox control deficiency records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to internal control exception logs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to policy exception approvals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to license and royalty agreements in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to non-disclosure agreement repositories in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to corporate records under seal in international contexts. This content represents formal corporate records and under-seal documentation (sealed records, company and common seals, statutory registers); it is not inherently personally identifiable information.
Identifies documents containing references to m&a target lists in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to letters of intent in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to data room due diligence documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to synergy realization plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to post-merger integration plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to divestiture strategy documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to strategic roadmap documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to pricing strategy models in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to product sunset plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to capital allocation strategy documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to scenario planning models in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to proprietary algorithm designs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to manufacturing process tolerances in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to prototype engineering designs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to patent draft claims in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to patentability assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to trademark strategy analyses in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies inventories and registers of trade-secret assets — register, inventory-entry, and asset-record structures as well as the topic label — in security and access control contexts. Detects potential exposure of sensitive security information in Australian systems.
Detects populated research laboratory notebook entries: a lab/research/electronic lab notebook or experiment-log phrase combined with a labelled experiment/entry/batch identifier or a named researcher/witness. Phrase-only mentions stay discovery-only.
Detects unpublished research datasets: an unpublished / pre-publication / raw research data phrase combined with populated data rows keyed by a participant or sample identifier, or study metadata (study ID, HREC reference, protocol number, data custodian). Phrase-only mentions stay discovery-only.
Identifies documents containing references to firmware internals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to source process know-how manuals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to product requirement specifications in Australian contexts. Higher confidence identifies populated product requirement specifications (requirement identifiers with shall/acceptance/priority/owner/release fields, or user-story structures); generic quality, compliance, and specification vocabulary remains discovery-only.
Identifies documents containing references to unreleased feature specifications in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to defect backlog with customer impact in Australian contexts. Higher confidence identifies backlog records that connect product defects to concrete customer impact (BUG/DEFECT/ISSUE identifiers with affected customers/accounts, customer impact, workaround, severity, or release-target detail); defect and customer-impact vocabulary alone remains discovery-only.
Identifies documents containing references to pre-release test result datasets in Australian contexts. Higher confidence identifies datasets of executed tests for not-yet-released builds (result rows with pass/fail outcomes tied to a candidate, RC, or unreleased build identifier); general QA and testing vocabulary remains discovery-only.
Identifies documents containing references to reliability and failure analysis in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to safety certification evidence in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to quality nonconformance reports in Australian contexts. Higher confidence identifies nonconformance records (NCR/NC/DEV identifiers with affected-item, observed-condition, disposition, owner, or closure detail) or the explicit nonconformance-report label; standalone corrective/preventive-action and quality-audit vocabulary remains discovery-only.
Identifies documents containing references to product recall decision files in Australian contexts. Higher confidence identifies internal files used to decide or authorise a recall (decision, recommendation, risk-benefit, affected-lot, approval, or unresolved-action evidence); public recall notices and generic recall vocabulary remain discovery-only.
Identifies documents containing references to supplier quality audit findings in Australian contexts. Higher confidence identifies populated supplier quality audit findings (finding/observation/NC identifiers with supplier context and severity, clause, evidence, or corrective-action detail) rather than audit administration; supplier-audit vocabulary alone remains discovery-only.
Identifies documents containing references to design verification plans in Australian contexts. Higher confidence identifies plans for future design verification activities (planned verification items with test IDs, methods, requirement traces, acceptance criteria, owners, or schedules); design-review and compliance-testing vocabulary alone remains discovery-only.
Identifies documents containing references to design validation reports in Australian contexts. Higher confidence denotes reports of performed design validation (executed tests with observed results, pass/fail outcomes, deviations, conclusions, or approval), not plans or protocols; validation/review/protocol vocabulary alone remains discovery-only.
Identifies documents containing references to root-cause corrective action plans in Australian contexts. Higher confidence identifies populated plans linking an analysed root cause to assigned corrective work (owner, due date, containment, or effectiveness verification); standalone RCA/CAPA topic terms remain discovery-only.
Identifies documents containing references to warranty claim analytics in Australian contexts. Higher confidence identifies analysis of warranty populations (aggregate rates, counts, costs, or trends broken down by period, cohort, model, region, or failure category), not individual claim records; warranty/claim vocabulary alone remains discovery-only.
Identifies documents containing references to manufacturing deviation records in Australian contexts. Higher confidence identifies records of actual manufacturing departures from requirement (deviation/OOS/NCR identifiers with affected batch or lot and expected-versus-actual, disposition, or approval detail); deviation and batch-record vocabulary alone remains discovery-only.
Identifies documents containing references to product hazard analyses in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to release approval records in Australian contexts. Higher confidence identifies actual approval or authorisation records for a release (release/batch/ build/version identifier with a decision and approver/date detail) or the explicit release-approval label; product-release and generic sign-off vocabulary alone remains discovery-only.
Identifies private source code repositories patterns in security and access control contexts. Detects potential exposure of sensitive security information in Australian systems.
Identifies private code forks patterns in security and access control contexts. Detects potential exposure of sensitive security information in Australian systems.
Identifies api interface specifications patterns in security and access control contexts. Detects potential exposure of sensitive security information in Australian systems.
Identifies feature flag configurations patterns in security and access control contexts. Detects potential exposure of sensitive security information in Australian systems.
Identifies documents containing references to export-controlled university research in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations. Enforcement is aimed at controlled university research and its technical data; ordinary import/export licensing language is discovery-only unless independent university-research or controlled-technical-data evidence is present.
Detects trade secret designations, proprietary information notices, and commercial-in-confidence markings.
Detects completed vendor risk assessments: third-party risk assessment wording with populated vendor/contract fields and inherent/residual risk ratings, supported at high confidence by assurance evidence. Topic wording alone is discovery-only.
Detects Hungarian Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects Aadhaar patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects India GST Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Indian Financial System Codes (IFSC) used to identify bank branches on the NEFT/RTGS/IMPS networks. Format is four letters (bank code), a mandatory zero, then six alphanumeric characters (branch code), total length 11, typically uppercase.
Detects Codice Fiscale patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Italy Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects Japanese My Number Corporate patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. The Corporate Number (法人番号) is a 13-digit identifier assigned to corporations and organisations in Japan by the National Tax Agency.
Detects Mexican CLABE (Clave Bancaria Estandarizada) numbers used for SPEI interbank transfers. CLABE is an 18-digit standardized bank account number including bank code, branch, account and check digit.
Detects Netherlands Value Added Tax Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. VAT numbers have country-specific prefixes that aid detection accuracy.
Detects New Zealand Business Numbers (NZBNs) — the 13-digit universal business identifier administered by MBIE. Every NZBN is a GS1 Global Location Number (GLN): the first two digits are 94 (the GS1 prefix identifying New Zealand entities), the next ten digits are the business entity identifier, and the final digit is a GS1 mod-10 check digit. A bare 13-digit run has a phone-number-sized collision surface (NZ mobile/landline numbers, card fragments, timestamps), so every tier requires the number to be directly attached to an NZBN label — label-embedded-in-regex counts as label gating per the D1 decision record. There is deliberately no bare unlabelled tier.
Detects legal strategy for patent prosecution before filing, including prior art assessments, claim drafting strategy, and freedom-to-operate opinions. Disclosure destroys patent novelty or reveals prosecution strategy to competitors. Note: trainable classifier recommended for production deployment.
Detects Philippine Taxpayer Identification Numbers (TIN) issued by the Bureau of Internal Revenue (BIR) under Section 236(j) of the National Internal Revenue Code. The base TIN is a 9-digit number (the 9th digit is a check digit), usually written XXX-XXX-XXX. Registered businesses append a branch code — historically 3 digits (000 for the head office, 12 digits total) and, since eBIRForms v7.9.6.0 (RMC No. 36-2026, April 2026), up to 5 digits (14 digits total).
Detects National Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Personnummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Singapore Unique Entity Numbers (UEN) issued by ACRA and other agencies to businesses and other entities. Common forms are 8 or 9 digits plus a check letter (local companies) and the issued-year form TyyPQnnnnX / SyyPQnnnnX / RyyPQnnnnX used for other entities.
Detects proprietary trading algorithms, quantitative investment strategies, or systematic risk models used by government investment vehicles such as QIC (Queensland Investment Corporation). This deployable record is the keyword/regex fallback detector (basis-points anchor with quantitative and proprietary-marker evidence); any trainable ML classifier is a separate tenant artifact with an external identity and is not represented in this record.
Detects the Ukrainian individual tax number — the registration number of the taxpayer's account card (РНОКПП / RNOKPP, historically called RNTRC or ІПН), assigned by the State Tax Service of Ukraine to every individual taxpayer in the State Register of Individuals – Taxpayers. Per the OECD AEOI TIN description for Ukraine, the RNOKPP is a ten-digit numerical code (no letters, hyphens, or other symbols) with structure XXXXXNNNNK: a 5-digit birth-date registration sequence, a 4-digit account-card sequence, and a control digit.
Detects UK Companies House company registration numbers (CRNs). A company number is always 8 characters: either 8 digits (England & Wales incorporations), a 2-letter jurisdiction/entity-type prefix followed by 6 digits (e.g. SC Scottish company, NI Northern Ireland company, OC/SO/NC LLPs, RC/SR/NR royal-charter bodies, FC overseas companies, OE overseas entities), or R0 + 6 digits (pre-partition Northern Ireland companies, registered under the R0 prefix). The prefix allow-list is taken from the Companies House Uniform Resource Identifiers (URI) Customer Guide plus the post-2011 additions CE/CS (charitable incorporated organisations), SG (Scottish qualifying partnerships), OE (Register of Overseas Entities, 2022), RS (registered societies, e.g. the live entry RS008375) and FE (further education / sixth form college corporations). Bare 8-digit runs collide heavily with invoice, order and account numbers, so the all-numeric form is only ever matched when directly attached to a company-number label; the more distinctive prefixed form additionally gets a keyword-gated tier without a directly-attached label. Two allow-list prefixes are excluded from that bare prefixed form because they collide with common document-number abbreviations — NO ("INVOICE NO123456") and SO (ERP sales-order numbers such as SO123456) — and are matched only via the label-attached regex.
Detects the paired UK domestic bank sort code (6 digits, written XX-XX-XX, XX XX XX, or XXXXXX) and account number (8 digits) as they normally appear together in UK bank-detail blocks (invoices, remittance advice, payroll/BACS instructions). Both digit groups must be directly attached to their own label ("sort code" / "account number" or "a/c no") in either order — bare unlabelled 6- or 8-digit sequences are never matched, because unlabelled digit sequences of this length collide heavily with dates, phone extensions, invoice numbers, and other structured identifiers.
Detects United Kingdom (and Northern Ireland XI) Value Added Tax registration numbers. Standard trader numbers are GB followed by 9 digits; branch traders use GB plus 12 digits; government departments use GBGD### and health authorities GBHA###. Northern Ireland post-Brexit issues XI-prefixed numbers with the same body formats. Matching is uppercase letter prefixes as issued by HMRC.
Detects Vietnam Citizen Identity Card numbers (Căn cước công dân / CCCD). Modern chip-card numbers are 12 digits beginning with 0, embedding gender/century and place-of-birth codes.
Detects Id Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects South African income tax reference numbers (TIN) allocated by the South African Revenue Service (SARS) under section 24 of the Tax Administration Act, 2011. The number is ten digits, may only start with 0, 1, 2, 3 or 9, and its tenth digit is a check digit computed with a modulus-10 (Luhn-style) algorithm documented by SARS.