Packages / Privacy And Personal Data Suite
Broad personal data suite for customers that want full privacy coverage in one selection.
Detects Emirates Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects UAE passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Cuit Cuil patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Documento Nacional de Identidad patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Argentine passport numbers issued by the Registro Nacional de las Personas (RENAPER). Since the 2012 biometric passport series, every booklet carries a unique alphanumeric number of exactly three uppercase letters followed by six digits (e.g. AAC382190). The number is independent of the holder's DNI. Special three-letter series are reserved for travel documents issued to stateless persons (ZZA) and refugees (ZZX) under RENAPER Disposicion 904/2021.
Detects Austria driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Personalausweis patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Austria passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Austria Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Sozialversicherungsnummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Austria Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Identifies Australian Bank State Branch (BSB) routing codes in 3-digit dash 3-digit or continuous 6-digit formats. Supports space separator. Requires corroborative financial-institution keywords.
Identifies Australian mobile telephone numbers in domestic (04XX) and international (+614XX) notation. Uses lookaround boundaries to prevent embedded numeric matches. Supports space-only separation between digit groups for high precision.
Detects candidate Centrelink Customer Reference Numbers consisting of 9 digits followed by a letter. The bare shape is not unique and requires a CRN/Centrelink label for enforcement.
Commonwealth Higher Education Student Support Number (CHESSN): a 10-digit number identifying a student's HELP loans and Commonwealth support. Being retired in favour of the USI since 2021 but still present on Commonwealth Assistance Notices and legacy records.
Detects Australian Citizenship Certificate number patterns including prefixed formats (ACC, CDM, ACS, CAS followed by 4-8 digits) and numeric-only formats (0 + 10 digits).
Detects Australian Company Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Catalogue reference for the Microsoft Purview built-in Australia Driver's License Number sensitive information type. Microsoft recommends medium confidence (75) for the built-in entity. This YAML-only record supports registry search and discovery without reproducing Microsoft's built-in regular expressions, keyword dictionaries, or XML.
Identifies Australian fixed-line telephone numbers across domestic bracketed, unbracketed, and international formats for area codes 02, 03, 07, and 08. Uses lookaround boundaries and supports hyphen separators within digit groups.
Detects Individual Healthcare Identifier (IHI) patterns. The IHI is a 16-digit number starting with the prefix 800360; the official format carries a Luhn check digit (not enforced here).
Identifies Australian personal names using capitalised name structure with controlled evidence from the consolidated Australian forename and surname dictionaries. Supports the multicultural name coverage represented in Australian birth, immigration, and administrative sources.
Detects populated Australian loan agreements and credit contracts: a loan agreement / credit contract / loan facility phrase combined with named borrower or lender fields, a stated loan amount or repayment, or a loan/facility reference number. Phrase-only mentions stay discovery-only.
Detects Australian Medicare card numbers, which are issued to Australian citizens and permanent residents for access to subsidised healthcare under the Medicare system. The number consists of 10 digits: the first digit is between 2 and 6, followed by 8 additional digits and a single check digit. Numbers are commonly formatted as groups of 4-5-1 digits separated by spaces or hyphens.
Detects Medicare Provider Number patterns. An 8-character code consisting of 6 digits, a location character, and a check character. Validated by location and check character sets.
Detects populated Australian mortgage documents (mortgage deeds, home loan contracts, registered mortgages, discharges): the mortgage phrase combined with named mortgagor/mortgagee fields, a security property or title reference, or a secured loan amount. Phrase-only mentions stay discovery-only.
Discovery-only compatibility coverage for Australian driver's licence number candidates across all states and territories. The stable au-motor-vehicle-permit slug is retained for catalogue, collection, workbook, and package compatibility. State and territory enforcement belongs to the eight au-*-driver-licence-number SITs. Microsoft Purview tenants can instead select the free built-in Australia Driver's License Number entity (1cbbc8f5-9216-4392-9eb5-5ac2298d1356); this compatibility pattern is not a custom clone of that built-in.
Detects references to nationality/citizenship/immigration-status disclosure in Australian documents: nationality fields, national origin, citizenship status, visa status, and naturalization records. Not framed as an Art-9-style special category (Australia has no equivalent regime) — sensitivity here rests on immigration-status/visa risk under the Migration Act 1958 (Cth) and on the "national origin" limb of the Racial Discrimination Act 1975 (Cth), distinct from that Act's race/ethnicity limb covered by the sibling au-racial-ethnic-origin pattern. Topic-grade detector, low confidence by design.
Detects NDIS Participant Number patterns. A 9-digit number starting with the prefix 43.
Detects five implemented Australian standard number-plate shapes for NSW, Victoria, Queensland, South Australia, and Western Australia. It does not validate issuance and excludes personalised plate formats; registration and transport-agency evidence controls enforcement.
Detects PBS Prescriber Number patterns. A 7-digit number whose check digit uses weights [0,5,8,4,2,1], mod 11 (checksum NOT enforced in this regex-only pattern; structural detection only).
Detects a populated Australian residential street address linked to a labelled person. Bare address structure is available for discovery, the balanced tier requires person and residential context plus Australian geography, and the strict tier requires state and postcode corroboration. A parallel household-utility path treats a utility supply/service address linked to a labelled account holder as a person-linked residence. Absorbs the former au-top500-041-home-address and au-top500-054-home-utility-account-addresses classifiers.
Catalogue reference for the Microsoft Purview built-in Australia physical addresses named-entity SIT. Microsoft rates the built-in at medium confidence and includes it in All Physical Addresses. This YAML-only record supplies supplementary Australian address vocabulary for registry search and testing; it does not reproduce Microsoft's opaque named-entity engine and is not a custom XML clone.
Detects Nationally Coordinated Criminal History Check (National Police Check) certificate and application reference numbers issued through the ACIC National Police Checking Service. Matches a police check phrase near a reference / certificate / receipt value that identifies a specific check.
Detects Australian property title and plan references used across state and territory land-title systems, including Lot/DP, Lot/SP, Lot/PS, Lot/LP, Lot/CP, title references, and folio identifiers. Requires land-registry context for enforcing tiers.
Detects Queensland blue card (working with children check) applications, renewals and screening outcomes for a named applicant - blue card application or renewal records, positive or negative notices and exemption cards - when the phrase sits with populated applicant identifiers and application fields.
Detects QLD Bond Loan applications for rental assistance and financial hardship support.
Detects completed Queensland driver licence application, renewal and replacement forms (Transport and Main Roads, e.g. F3000) containing populated applicant fields.
Detects Queensland home education registration records for a named child - home education registration or provisional registration applications and reports, and exemptions from compulsory schooling - when the phrase sits with populated child/parent identifiers and registration fields.
Detects populated Queensland social / public housing applications and housing register records: a housing application or housing register phrase combined with a named applicant or household member, household income, household size or current address. Phrase-only mentions stay discovery-only.
Completed records under the Queensland Mandatory Notification of Data Breach (MNDB) scheme in chapter 3A of the Information Privacy Act 2009 (Qld), as inserted by the Information Privacy and Other Legislation Amendment Act 2023: the s 51 statement to the Information Commissioner, the s 53 notice to affected individuals, s 52 further information, and entries in the s 72 register of eligible data breaches. The scheme has applied to Queensland government agencies since 1 July 2025 and to local government since 1 July 2026. A populated record names the agency and gives the date of the breach, the type of eligible data breach (unauthorised access, unauthorised disclosure or loss, s 47), the kinds of personal information involved, the number of individuals affected or notified, and the containment and mitigation steps. OIC guidance, the Act, published MNDB statistics and blank templates are decoys. Overlaps with au-data-breach-report, which is framed around the Commonwealth Notifiable Data Breaches scheme (Privacy Act 1988 Part IIIC); Commonwealth NDB signals are excluded from this classifier's enforce tiers.
Detects Queensland school incident and student behaviour records for a named student - school/student incident reports, behaviour incident records, behaviour support plans and disciplinary absence (suspension/exclusion) records - when the phrase sits with populated student identifiers and incident fields.
Detects special education and special needs learning plans for a named student - personalised learning plans, individual curriculum/education/support plans, Education Adjustment Program profiles and student support plans with disability, adjustment and goal details - when the plan phrase sits with populated student identifiers and plan fields.
Detects completed Queensland student enrolment forms and applications - student, school or prep enrolment forms, applications for enrolment and SEF-1 records with child and family details - when the phrase sits with populated student identifiers and enrolment fields.
Identifies Queensland vehicle registration application, transfer, renewal, and certificate forms. Queensland form topics are discovery-only; enforcement requires multiple registration-record fields, while high confidence also requires an official F3518/F3520 form number and a populated VIN, registration-number, or plate-number field.
Identifies Australian physical addresses using structural street-number + street-name regex combined with road-type, state/territory, and postcode corroborative evidence. Covers the implemented road-type endings: the standard abbreviated set plus the declared extended endings (Rise, View, Gardens, Loop, Trail, Track, Pass, Heights) — not the full GNAF classification list.
Identifies Australian Tax File Numbers (TFNs) — unique nine-digit identifiers issued by the Australian Taxation Office. Uses an inline mod-11 Checksum validator with AllDigitsSameFilter and TextMatchFilter to exclude known test values.
Identifies personal names preceded by salutations (Mr, Mrs, Ms, Dr, Prof, etc.) in Australian documents. Uses structural regex for honorific + capitalised name components with corroborative evidence from the consolidated Australian forename and surname dictionaries.
Identifies documents containing references to legal full name in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to social security number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to taxpayer identification number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to lawful intercept transcripts in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to scada network diagrams in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies candidate Australian passport numbers using a broad one- or two-letter prefix followed by seven digits. The regex does not validate an issued passport series; Australian travel-document and issuing-nation evidence are required for enforcement.
Detects Unique Student Identifier (USI) patterns. A 10-character alphanumeric code (uppercase letters and digits) mandatory since January 2023 for higher education in Australia. The Purview design inventories the broad bare shape at 65, enforces a labelled value in education context at 75, and reserves 85 for labelled values with authoritative USI/VET record context.
Detects Working With Children Check (WWCC) clearance numbers across Australian states. Covers the NSW structural format (WWC + 7 digits + check letter, e.g. WWC1234567E) and the labelled VIC / WA / generic forms where a WWCC or working-with-children phrase precedes a card or clearance number. The Queensland Blue Card is handled by a separate classifier.
Detects Belgium driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Rijksregisternummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Belgium passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Belgium Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Bulgaria driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Bulgaria passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Bulgaria Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Единен граждански номер (ЕГН) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Brazilian driver licence numbers (CNH - Carteira Nacional de Habilitação). The CNH register number is 11 digits. Structural detection alone is ambiguous with CPF length, so corroborative CNH keywords are required for reliable use.
Detects CNPJ patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects CPF patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Registro Geral patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Brazil Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Brazilian PIX keys in email, +55 mobile, or EVP UUID forms.
Detects Canada Bank Account Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
Detects Canada driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ontario Health Insurance Plan (OHIP) numbers: 10 digits often grouped 4-3-3 with a two-letter version code.
Detects Canada passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects North American Numbering Plan (NANP) telephone numbers in Canadian contexts: the domestic NPA-NXX-XXXX form (bracketed, hyphenated, dotted, spaced, or bare, with an optional leading trunk "1") and the international +1 NPA-NXX-XXXX form. Area-code (NPA) and exchange-code (NXX) groups are constrained to a leading digit of 2-9 with the N11 service-code shape (211/311/411/511/611/711/811/911) excluded from both groups, per NANPA's published format rules. This pattern is structurally identical to us-phone-number because NANP area codes are drawn from a single pool shared by the US, Canada, and Caribbean member territories — the digit sequence itself cannot distinguish a Canadian number from a US one. This is the sibling of us-phone-number; the two are differentiated by jurisdiction/regulation metadata and country-specific corroborative evidence keywords only, not by regex — see us-phone-number's description for the documented family convention.
Detects Canada Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects SIN patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Swiss passport numbers issued by fedpol (Federal Office of Police). Passports of the 2003, 2006 and 2010 series carry an eight-character number consisting of one uppercase letter followed by seven digits (e.g. E1234567); the 2010 series always begins with the letter X. The letters O and I are never used, to avoid confusion with the digits 0 and 1. The 2022 series (the only series issued since October 2022) has no published fixed structure — fedpol deliberately keeps the numbering rules non-public — so 2022-series numbers may not match this shape. Only the documented 2010-and-earlier format is covered.
Detects Switzerland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects AHV-Nummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects RUT patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects People's Republic of China passport numbers. The current ordinary (e-)passport uses an 'E' prefix followed by one letter (excluding I and O) and 7 digits, or 'E' plus 8 digits. Older series use a 'G' prefix plus 8 digits, and earlier passports used 'P', 'D' (diplomatic) or 'S' (service) prefixes plus 8 digits. The short, loosely structured format means corroborative keyword proximity is strongly recommended.
Detects China Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Resident Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Cédula de Ciudadanía patterns. Detects this pattern using regex with corroborative keyword evidence.
Detects Colombia Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Cyprus driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Δελτίο Ταυτότητας patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Cyprus passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Cyprus Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Cyprus Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Czech driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Czech Republic passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Rodné číslo patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Czech Republic Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects German driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Personalausweis patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects German passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects German mobile telephone numbers per the Bundesnetzagentur's (BNetzA) Nummernplan für Mobile Dienste: the (0)15, (0)16, and (0)17 mobile sub-ranges, in both the domestic (leading trunk "0") and international (+49, leading 0 dropped) forms. BNetzA's own published length table shows the national significant number (the digits after the leading 0, including the "1" of "15/16/17") is 10 digits for most 016x/017x allocations and 11 digits for the 015x range and the 1609/176 exceptions — every quantifier below is bounded to this documented 10-11 digit span rather than left open-ended. The 10-11 bound is applied as a single envelope across all three ranges (the regex cannot pin 015x to exactly 11 and non-exception 016x/017x to exactly 10 without per-sub-range length alternation), so a 10-digit 015x or an 11-digit non-exception 016x/017x rendering is accepted — a deliberate, documented over-acceptance kept small by the envelope itself. Beyond the DIN 5008:2020 space-grouped form, two widespread legacy DIN 5008 renderings of the mobile prefix are covered: the slash form "0171/3920045" and the parenthesised form "(0171) 3920045" — both deprecated by the current DIN 5008 (which prescribes plain space grouping) but still common in signatures and letterheads — plus the "+49 (0)171 ..." letterhead form (nonstandard per ITU-T E.123, but ubiquitous). Geographic (Ortsnetz) landline numbers are intentionally out of scope (so the landline renderings "030/12345678" and "(030) 12345678" are likewise not matched): BNetzA states area codes run 2-5 digits and new allocations are capped at 11 significant digits (10 for the Berlin/Hamburg/Frankfurt/Munich two-digit-code exception), but does not publish a verified minimum length for the existing stock of legacy numbers, so a low-end bound would be invented rather than sourced — mirroring in-phone-number's decision to scope out India's similarly under-specified STD/landline numbers.
Detects Germany Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Steuer Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Denmark driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Denmark passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects CPR-nummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Denmark Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Cédula de Identidad patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Estonia driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Estonia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Isikukood patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Estonia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects DNI patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Spain driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects NIE patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Spain passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Spanish national telephone numbers per Spain's closed 9-digit numbering plan (Plan Nacional de Numeración Telefónica, administered under CNMC oversight): mobile numbers (segment N=6 in full, plus N=7 partially opened for mobile use in the 71/72/73/74 sub-ranges by the SETSI Resolución de 12 de marzo de 2010, BOE-A-2010-5251; the first 7-prefixed mobile numbers entered service from late 2010/2011 once the then-regulator CMT assigned the new ranges to operators) and geographic numbers (leading 8 or 9, with the second digit constrained to never be 0 — a constraint that incidentally excludes the 900/901/902/905 toll-free and premium-rate service ranges, whose second digit is 0). Spain has no domestic trunk prefix, so the +34 international form carries the same 9 significant digits as the domestic form, just with the +34 prefix in place of nothing.
Detects Spain Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Número de la Seguridad Social patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Spain Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects deployer-side fundamental rights impact assessments (FRIA) under Article 27 of the EU AI Act (Regulation (EU) 2024/1689). A FRIA is performed before deploying certain high-risk AI systems by public bodies, private providers of public services, and deployers of credit-scoring and life/health-insurance pricing systems (Annex III points 5(b) and (c)). Completed FRIAs contain candid assessments of risks of harm to specific categories of natural persons and are sensitive before notification and remediation.
Detects European debit and credit card numbers for Visa, Mastercard, and American Express networks. The pattern matches 13- to 16-digit card numbers based on the leading digits assigned to each network by the ISO/IEC 7812 standard. This is commonly used for PCI-DSS compliance scanning across EU-regulated financial data.
Detects EU driver's license number patterns across all EU member states. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects International Bank Account Numbers (IBANs) used across European and global banking systems. IBANs consist of a two-letter country code, two check digits, and up to 30 alphanumeric characters representing the domestic bank account number. This pattern matches IBANs with or without space or hyphen delimiters between digit groups.
Detects references to EU National Identification Number using keyword matching. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects EU passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation. This is a broad, multi-country SIT that aggregates passport number detection across EU member states.
Detects references to EU Social Security Number (SSN) or Equivalent ID using keyword matching. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects EU Tax Identification Number (TIN) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. EU TIN formats vary by member state; this keyword list provides tax-related terminology for supplementary matching across EU jurisdictions.
Detects Finland driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Henkilötunnus (HETU) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Finland passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Finland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects France driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects France Health Insurance Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Carte Nationale d'Identité patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects NIR Insee patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects France passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects French national telephone numbers per ARCEP's numbering plan: 10-digit numbers in the "0X XX XX XX XX" form covering geographic (01-05), mobile/personal (06-07), and polyvalent (09) leading digits, plus the +33 international form (10-digit domestic number with the leading 0 dropped, per ARCEP convention), including the widespread "+33 (0)6 39 98 45 67" letterhead rendering (a common-but-nonstandard practice — ITU-T E.123 advises against the parenthesised trunk digit in international notation, but it is ubiquitous on French letterheads and email signatures, so it is matched for detection purposes). The 09 polyvalent range is in scope because it is predominantly personal PII in practice: 09 is the standard residential VoIP home-line range, auto-issued with consumer internet boxes to millions of French households; only the small 0937-0939 sub-range carries ARCEP's newer "technical platform" category (app-to-driver ephemeral numbers and similar). Numbers beginning 08 (value-added services) remain intentionally out of scope — organizational/service numbers rather than personal PII, mirroring how uk-phone-number scopes out non-geographic service ranges.
Detects France Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects France Tax Identification Number (numéro SPI.) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Greenland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects mobile advertising identifiers - Apple's IDFA and Google's Advertising ID (GAID, also called AAID) - when they appear labelled with an advertising-ID keyword. These IDs are UUIDs in the canonical 8-4-4-4-12 hexadecimal form. Although resettable, advertising IDs are persistent cross-app device identifiers treated as personal data under GDPR and CCPA/CPRA, and their disclosure enables cross-context tracking and re-identification.
Catalogue reference for the Microsoft Purview built-in All Full Names named-entity SIT. This YAML-only record supplies supplementary name-field vocabulary for registry search and testing; it does not reproduce Microsoft's opaque name-recognition resources.
Catalogue reference for the Microsoft Purview built-in All Physical Addresses bundled named-entity SIT, which contains country and region physical-address SITs including Australia physical addresses. This YAML-only record supplies supplementary address vocabulary for registry search and testing; it does not reproduce Microsoft's opaque named-entity resources and is not a custom XML clone.
Detects biometric data about an identified person - biometric templates, identifiers and records, fingerprint scans or templates, facial recognition, iris/retina scans, voiceprints and palm prints - when the biometric phrase sits with a populated person identifier and biometric enrolment/capture fields.
Detects encoded biometric template artifacts rather than the word "fingerprint". Matches the ISO/IEC 19794 family modality magic markers (FMR\0 finger minutiae, FIR\0 finger image, FAC\0 face, IIR\0 iris — also the ANSI/INCITS 378 FMR header) and base64 blobs explicitly labelled as a biometric / fingerprint / iris / face template. Real biometric exfiltration moves as encoded templates, not plaintext.
Detects date-of-birth references across common date formats (numeric slash/dot/hyphen, written month, ISO) when birth-record labels or personal-record context are present. Covers Australian and global document styles; business dates (invoice, due, expiry) and template samples are suppressed.
Detects personal data about an identified child - children's data, records and information, minors' personal information, and parental or guardian consent records - when the phrase sits with a populated child/parent identifier and consent or account fields.
Detects Department of Veterans' Affairs (DVA) file numbers used to identify Australian veterans and eligible dependants for health and support services.
Identifies electronic mail addresses in local-part@domain.tld form using a pragmatic RFC 5322 / WHATWG HTML Living Standard subset: bounded local-part (64 characters, per RFC 5321) and domain-label quantifiers, not the full RFC 5322 address-list grammar (no quoted-string local parts, comments, or domain literals). Unlike the WHATWG "valid e-mail address" definition, a dotted domain ending in an alphabetic (or xn-- punycode) top-level label is required, so dotless intranet values such as user@localhost are deliberately excluded. Retina image asset names (logo@2x.png) are rejected in the primary. Absorbs the former global-email-address classifier.
Detects sensitive employment case records about an identified worker: workplace investigations, disciplinary action and show cause notices, grievance and harassment complaints, workers compensation and return to work plans, termination and redundancy notices.
Detects geographic coordinates as a decimal-degree latitude/longitude pair (e.g. -33.8688, 151.2093), as a degrees-minutes-seconds (DMS) value with a hemisphere letter (e.g. 40° 26' 46" N), or as a Military Grid Reference System (MGRS) reference (e.g. 4QFJ 12345 67890). The slug predates the DMS and MGRS scope, which was absorbed from the former global-gps-coordinates-dms classifier.
Detects populated guarantee and indemnity instruments (personal/corporate/continuing guarantees, deeds of guarantee, guarantor agreements) that name the guarantor or borrower, state a guaranteed amount or limit, or carry an ABN/ACN. Phrase-only mentions stay discovery-only.
Tabular HRIS, payroll or reporting exports of staff personal details that do not carry TFNs: a CSV, spreadsheet or pipe/tab-delimited header row of HR column labels (employee / staff ID, name, date of birth, home address, position / classification, commencement or termination date, employment status) followed by populated staff rows. Detected from the extract's own structure, so it fires wherever the file lands (code repositories, reporting databases, file shares, test data folders), not only in HR-branded systems.
Detects International Bank Account Numbers (IBANs) across the full ISO 13616 / SWIFT IBAN Registry country set, extending coverage beyond the EU-focused eu-iban pattern to non-EU IBAN countries verified against the SWIFT IBAN registry — at minimum United Kingdom (GB, 22 chars), Switzerland (CH, 21), Norway (NO, 15), Saudi Arabia (SA, 24), United Arab Emirates (AE, 23), and Turkey (TR, 26). The structural regex widens eu-iban's BBAN length range (12-36 alphanumeric characters) down to 8-32 specifically to also catch shorter formats such as Norway's 15-character IBAN (11-character BBAN), which falls below eu-iban's minimum and would not match it. This pattern intentionally co-fires with eu-iban for EU country codes, since neither pattern restricts the 2-letter prefix to a specific country allow-list — see false_positives.
Detects IPv4 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects IPv6 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects references to nationality/citizenship/immigration-status disclosure: nationality fields, national origin, citizenship status, visa status, and naturalization records. Unlike the three sibling Art-9 patterns in this wave (sexual-orientation, religious-beliefs, racial-ethnic-origin), nationality is NOT a GDPR Article 9 special category — it is processed under GDPR's ordinary Article 6 lawful-basis regime. It is grouped with the Art-9 set here because it shares the same detection problem (an attribute value with no fixed format) and was bundled with them in the C3 deprecation/gap analysis, and because national origin carries real discrimination risk. Topic-grade detector, low confidence by design.
Detects references to neural / neurotechnology data: brain-computer interface signals, EEG/EMG recordings, evoked potentials, neural decoding output and neurofeedback data. Colorado HB24-1058 and California SB 1223 both classify neural data as sensitive personal information. Topic-grade vocabulary detector, not a fixed-format detector.
Detects the Machine-Readable Zone (MRZ) of an ICAO 9303 travel document, the OCR-B text printed at the bottom of passport data pages and scanned at border control. This pattern focuses on the TD3 passport format (two lines of 44 characters): line 1 begins 'P' + document subtype + 3-letter issuing state + the holder's names, and line 2 packs the document number, check digits, nationality, date of birth, sex and expiry. MRZ leakage via scans, photocopies and OCR exports is one of the highest-value passport data exposure vectors because it concentrates every identity field in a single fixed-width block.
Detects Australian PayID payment addresses used on the New Payments Platform (NPP). A PayID is an email address, mobile phone number (+61 / 04xx format), ABN or organisation identifier registered as a real-time payment alias, detected when it appears near an explicit PayID label in a payment context.
Identifies payment card Primary Account Numbers (PANs) for Visa, Mastercard (including 2-series BINs), American Express, Discover, JCB, Diners Club and UnionPay, in contiguous and space/hyphen-separated forms. Uses Func_credit_card Luhn validator with AllDigitsSameFilter.
Detects international telephone numbers in ITU-T E.164 form: a leading "+" (the international prefix symbol defined by ITU-T E.123, the companion notation recommendation) followed by a country code and national significant number totalling no more than 15 digits, per E.164's own numbering-space limit (country code 1-3 digits, subscriber number up to 12 digits, 15 digits maximum overall). This pattern covers only the "+"-prefixed international representation — it is the global counterpart to the country-specific domestic-format patterns (us-phone-number, ca-phone-number, uk-phone-number, in-phone-number, and the EU national patterns), which additionally match each country's bare domestic formatting conventions. Real-world renderings commonly use spaces or hyphens between digit groups even though E.123 formally prescribes spaces only; both are accepted here. The "+CC (0)..." letterhead rendering (e.g. "+44 (0)20 7946 0958") is deliberately NOT matched by this pattern: it is not an E.164 representation (E.123 explicitly advises against the parenthesised trunk digit in international notation), and the country-specific patterns whose plans actually use a trunk 0 (uk/de/fr/nl) each cover it themselves — keeping this global pattern strictly E.164-shaped.
Detects references to political opinions and party affiliation: party membership, voter registration by party, political donations and campaign contributions. GDPR Article 9 lists political opinions as a special category of personal data with no fixed format — it is detectable only by topic vocabulary. Topic-grade detector, low confidence by design.
Detects racial or ethnic origin information in person-linked demographic, workforce, intake, census, application, and case records. The detector recognises explicit racial/ethnic-origin phrases and structured race or ethnicity fields, then raises confidence only when the same span contains a data-subject record and a populated attribution. Racial or ethnic origin is protected under GDPR Article 9 and Australian anti-discrimination and privacy law. Topic-grade detector, low confidence by design.
Detects religious or philosophical belief information in person-linked membership, patient, workforce, census, pastoral-care, and accommodation records. The detector recognises explicit belief, affiliation, observance, denomination, and structured religion-field terminology, then raises confidence only for person records and populated belief or accommodation statements. Religious or philosophical beliefs are protected under GDPR Article 9 and Australian anti-discrimination and privacy law. Topic-grade detector, low confidence by design.
Detects populated residential tenancy agreements (including Queensland Form 18a general tenancy agreements): the tenancy-agreement phrase combined with named tenant/lessor fields, a numbered premises address, a stated rent or bond amount, or a bond number. Phrase-only mentions stay discovery-only.
Detects sexual-orientation information in person-linked workforce, patient, survey, member, relationship, intake, and case records. The detector recognises the explicit sexual orientation phrase, orientation-specific identification statements, coming-out statements, and same-sex partner or spouse references, then raises confidence only for person records and populated attributions. It deliberately excludes transgender status, gender identity, and pronouns because those are distinct attributes. Sexual orientation is protected under GDPR Article 9 and Australian anti-discrimination and privacy law. Topic-grade detector, low confidence by design.
Identifies personal records that link a person to previous legal names or aliases (former, maiden, birth or assumed names, deed-poll name changes, also-known-as entries) with populated identity fields.
Identifies documents containing references to place of birth in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to citizenship status in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to biometric identifiers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to handwritten signatures in Australian contexts. This remains a concept detector over manual/wet/ink/specimen signature wording — it does not inspect handwriting pixels or capture a signature image. Bare "signed by" attribution (common in electronic/typed signature text) is corroborating evidence only, not a primary indicator.
Identifies documents containing references to marital status in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to gender or sex marker in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to disability status in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to genetic data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies records about a deceased person that carry cultural-sensitivity handling requirements (for example Aboriginal and Torres Strait Islander name and image restrictions): a deceased-person record with populated person fields and explicit cultural-protocol evidence.
Identifies documents containing references to national identity number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to voter registration number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to birth certificate number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to death certificate number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to marriage certificate number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to immigration file number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to residence permit number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to refugee or asylum case number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to police identity number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to prisoner identification number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to firearm license number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to professional license number in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to social benefits claimant number in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to home address in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to mailing address in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to personal phone number in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations. Phrase-level concept detector: it matches contact-number wording, not telephone digits. Enforcing tiers require a personal/home qualifier (personal phone number, home phone, personal mobile, call-back number, phone contact). Bare mobile/cell/telephone/contact/SMS/direct-dial labels without that qualifier are discovery-only.
Identifies documents containing references to personal email address in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations. Phrase-level concept detector: it matches email-label wording, not populated mailbox addresses; generic email/contact/correspondence labels without a personal or private qualifier are discovery-only.
Identifies documents containing references to work email address in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to emergency contact details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to real-time geolocation in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to historical location trails in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to travel itinerary details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to vehicle registration details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to device imei numbers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations. Detection is phrase-level concept matching anchored on explicit IMEI, TAC, and equipment-identity vocabulary; it does not parse or Luhn-validate 15-digit IMEI values.
Identifies documents containing references to sim card identifiers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to mac addresses linked to users in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to home utility account addresses in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to household composition details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to building access badge location logs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to hotel booking details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to frequent traveler numbers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to border crossing history in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to commuting pattern data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects individual employment contracts, contracts of employment and letters of offer for a named or numbered employee, with commencement, remuneration or classification terms.
Detects performance reviews, appraisals, performance and development agreements and performance improvement plans for an identified employee, with a rating, review period or review date.
Detects disciplinary records about an identified employee: written, formal or final warnings, disciplinary findings and outcomes, and show cause notices (including Queensland public sector notices under Public Sector Act 2022 s 91 and Discipline Directive 05/23) with allegations, particulars, the disciplinary ground or response dates.
Detects employee grievance and workplace complaint records (including bullying and harassment complaints) naming a complainant, respondent or employee, with lodgement or incident dates, a reference number or a finding.
Identifies records that reveal a whistleblower's identity - public interest / protected disclosure intake and case records, whistleblower reports and discloser identity registers - when the disclosure phrase sits with populated discloser identifiers and disclosure case fields.
Identifies documents containing references to background check results in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects right-to-work and visa entitlement verification records for an identified employee or candidate: Visa Entitlement Verification Online (VEVO) check results and printouts, work entitlement checks and US Form I-9 records, carrying the holder plus visa fields such as the visa subclass, the 13-digit visa grant number, transaction reference number (TRN) or visa evidence number, grant / expiry / must-not-arrive-after dates, period of stay, and Migration Regulations 1994 Schedule 8 visa conditions (for example 8101, 8104, 8105, 8107, 8547, 8607, 8608).
Detects records of an identified employee's trade union membership or delegate status: payroll deduction authorities, membership numbers, join dates and dues. Union membership is sensitive information under the Privacy Act 1988 (Cth).
Detects salary reviews, pay increases and compensation adjustment histories for an identified employee, with current/new salary amounts, percentage increases, classification/step or effective dates.
Detects bonus and incentive allocations (STI/LTI awards, bonus pool allocations, performance bonuses) for an identified employee or participant, with award amounts, percentage of base, scorecard results or payment dates.
Identifies documents containing references to equity grant details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects manager and supervisor notes, feedback and observations about an identified employee or direct report, with meeting dates, capability ratings, concerns raised or agreed actions.
Detects psychometric, personality, aptitude and cognitive-ability assessment results for an identified candidate or employee: a named candidate/applicant with scores, percentiles, sten values, trait ratings or a suitability recommendation.
Detects interview evaluations, panel notes, candidate assessments and selection reports (including Queensland public sector selection reports under Recruitment and Selection Directive 07/23) for an identified candidate or applicant, with scores, recommendations or interview dates.
Detects succession plans, succession registers and talent reviews that name incumbents, successors or employees, with readiness, flight-risk or potential ratings or target critical roles.
Detects reduction-in-force and redundancy selection lists, voluntary separation offers and employees-requiring-placement records that name employees, with separation dates, redundancy or severance amounts, years of service or placement status.
Detects timesheets, time and attendance records and Queensland time and wages records for an identified employee, with shift start/finish times, ordinary or overtime hours, or pay period dates.
Detects leave applications, leave requests and absence records for an identified employee (annual, sick/personal, carer's, compassionate, parental, long service leave, leave without pay), with leave type, dates, hours/days taken or balances.
Identifies documents containing references to workplace investigation files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects exit interview, exit survey and separation interview records for an identified departing employee, with reasons for leaving, last day or resignation date, rehire eligibility or satisfaction scores.
Identifies documents containing references to vendor master records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects supplier/vendor bank detail change requests - the payment-redirection pattern behind business email compromise: a bank-detail change phrase combined with a BSB, a bank account number, a named supplier/payee or a vendor number/ABN. Phrase-only mentions (scam warnings, AP procedures) stay discovery-only.
Identifies documents containing references to purchase order records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bid and tender proposals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to contracted pricing schedules in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to supplier invoice records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to tax exemption certificates in international contexts. These are tax-compliance certificates that may contain entity or individual identifiers; the category is not blanket personally identifiable information.
Identifies documents containing references to third-party risk assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to supplier due diligence reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to customs declaration data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bills of lading in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to shipping manifest details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to inventory valuation reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to bill-of-materials cost data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to service-level penalty records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to rebate agreement terms in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to channel partner margin agreements in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to procurement fraud investigation files in international contexts. These are investigative and procurement-sensitive records that may contain personal allegations; the category is not blanket personally identifiable information.
Identifies documents containing references to sole-source justification memos in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to supplier performance scorecards in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to board meeting minutes in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to committee meeting minutes in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies legal advice memoranda, legal opinions and privileged lawyer-client communications (legal professional privilege / client legal privilege, solicitor-client or attorney-client privilege, privilege logs). These are privileged or confidential legal advice records; the category is not personally identifiable information, and a match does not prove that privilege attaches. Absorbed global-top500-164-attorney-client-privileged-communications (2026-09-24).
Identifies substantive responses and submissions addressing regulatory, supervisory, prudential, or compliance examinations and findings. Topic phrases are retained for discovery; enforcement requires response, finding, root-cause, remediation, ownership, due-date, evidence, dispute, or control-gap content, and high confidence also requires a formal examination/finding reference or response due date.
Identifies antitrust / competition-law legal analyses prepared as memos or advice: competition-law topic phrases inside a populated legal document header, with competition-specific analysis evidence at the high tier. These are commercially and legally sensitive analyses; the category is not personally identifiable information.
Identifies documents containing references to ethics hotline case records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to policy violation findings in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to internal audit workpapers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to sox control deficiency records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to internal control exception logs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to policy exception approvals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to breach notification draft communications in international contexts. Sensitive pre-release breach communications may contain personal-impact data — incident scope, affected individuals and groups, regulator engagement, and unverified legal conclusions; the matched phrases are not themselves personally identifiable information.
Identifies documents containing references to license and royalty agreements in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to non-disclosure agreement repositories in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to corporate records under seal in international contexts. This content represents formal corporate records and under-seal documentation (sealed records, company and common seals, statutory registers); it is not inherently personally identifiable information.
Identifies documents containing references to m&a target lists in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to letters of intent in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to data room due diligence documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to valuation models in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to synergy realization plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to post-merger integration plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to divestiture strategy documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to restructuring plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to strategic roadmap documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to market entry strategy papers in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies competitive intelligence reports: competitor analysis / comparison documents with populated competitor fields (competitor, product, pricing, market share, win rate, key accounts). This is commercial information, not personally identifiable information.
Identifies documents containing references to pricing strategy models in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects customer profitability analyses: a customer profitability / cost-to-serve / customer lifetime value phrase combined with populated per-customer data - rows keyed by a customer identifier, labelled margin/profit/revenue values or labelled customer identifiers. Phrase-only mentions stay discovery-only.
Identifies documents containing references to product sunset plans in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to nonpublic investor presentations in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to earnings guidance drafts in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to capital allocation strategy documents in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to fundraising term sheets in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to scenario planning models in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to proprietary algorithm designs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to chemical formulas in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to manufacturing process tolerances in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to prototype engineering designs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to patent draft claims in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to patentability assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to trademark strategy analyses in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects populated research laboratory notebook entries: a lab/research/electronic lab notebook or experiment-log phrase combined with a labelled experiment/entry/batch identifier or a named researcher/witness. Phrase-only mentions stay discovery-only.
Detects unpublished research datasets: an unpublished / pre-publication / raw research data phrase combined with populated data rows keyed by a participant or sample identifier, or study metadata (study ID, HREC reference, protocol number, data custodian). Phrase-only mentions stay discovery-only.
Identifies documents containing circuit schematic or layout content in Australian contexts. Enforcement denotes actual schematic or layout artifacts (reference designators with pin/net/node/footprint relations, netlists, sheet numbers, EDA design files) — circuit-design topic language alone, i.e. the discipline of circuit design, is discovery-only. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to firmware internals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to cryptographic implementation details in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to proprietary training datasets in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies pricing-engine implementation logic in Australian contexts: executable pricing rules, formulas, thresholds, and named pricing variables used to calculate prices or discounts. Topic-only pricing references (dynamic pricing, pricing model) remain discovery-level context and do not enforce.
Identifies documents containing references to recommendation model logic in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies private bidding-model parameters rather than online-advertising vocabulary generally: named parameter assignments (bid floors, pacing multipliers, objective weights, budget caps) enforce, while auction and programmatic-advertising topic terms remain discovery-only.
Identifies documents containing references to source process know-how manuals in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies actionable design-process rules and constraints in Australian contexts: DR-numbered design rules carrying shall/must/prohibited/limit language. General design-guidance, engineering-standard, and intellectual-property topic references remain discovery-level context and do not enforce.
Identifies documents containing references to unreleased product architecture in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to product requirement specifications in Australian contexts. Higher confidence identifies populated product requirement specifications (requirement identifiers with shall/acceptance/priority/owner/release fields, or user-story structures); generic quality, compliance, and specification vocabulary remains discovery-only.
Identifies documents containing references to unreleased feature specifications in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to defect backlog with customer impact in Australian contexts. Higher confidence identifies backlog records that connect product defects to concrete customer impact (BUG/DEFECT/ISSUE identifiers with affected customers/accounts, customer impact, workaround, severity, or release-target detail); defect and customer-impact vocabulary alone remains discovery-only.
Identifies documents containing references to pre-release test result datasets in Australian contexts. Higher confidence identifies datasets of executed tests for not-yet-released builds (result rows with pass/fail outcomes tied to a candidate, RC, or unreleased build identifier); general QA and testing vocabulary remains discovery-only.
Identifies documents containing references to reliability and failure analysis in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to safety certification evidence in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to quality nonconformance reports in Australian contexts. Higher confidence identifies nonconformance records (NCR/NC/DEV identifiers with affected-item, observed-condition, disposition, owner, or closure detail) or the explicit nonconformance-report label; standalone corrective/preventive-action and quality-audit vocabulary remains discovery-only.
Identifies documents containing references to product recall decision files in Australian contexts. Higher confidence identifies internal files used to decide or authorise a recall (decision, recommendation, risk-benefit, affected-lot, approval, or unresolved-action evidence); public recall notices and generic recall vocabulary remain discovery-only.
Identifies documents containing references to supplier quality audit findings in Australian contexts. Higher confidence identifies populated supplier quality audit findings (finding/observation/NC identifiers with supplier context and severity, clause, evidence, or corrective-action detail) rather than audit administration; supplier-audit vocabulary alone remains discovery-only.
Identifies populated serial/batch/lot traceability records in Australian contexts: a labelled non-placeholder identifier together with a manufacturing, movement, parent-child, or custody relationship. Covers single-item and batch records; bare serial-number field mentions remain discovery-level context only.
Identifies documents containing references to calibration records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to design verification plans in Australian contexts. Higher confidence identifies plans for future design verification activities (planned verification items with test IDs, methods, requirement traces, acceptance criteria, owners, or schedules); design-review and compliance-testing vocabulary alone remains discovery-only.
Identifies documents containing references to design validation reports in Australian contexts. Higher confidence denotes reports of performed design validation (executed tests with observed results, pass/fail outcomes, deviations, conclusions, or approval), not plans or protocols; validation/review/protocol vocabulary alone remains discovery-only.
Identifies documents containing references to field failure investigation reports in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to root-cause corrective action plans in Australian contexts. Higher confidence identifies populated plans linking an analysed root cause to assigned corrective work (owner, due date, containment, or effectiveness verification); standalone RCA/CAPA topic terms remain discovery-only.
Identifies documents containing references to warranty claim analytics in Australian contexts. Higher confidence identifies analysis of warranty populations (aggregate rates, counts, costs, or trends broken down by period, cohort, model, region, or failure category), not individual claim records; warranty/claim vocabulary alone remains discovery-only.
Identifies records of management review of a quality management system in Australian contexts — management-review notes carrying review structure such as attendees, agenda/inputs, decisions, action items and owners, quality objectives, or recorded conclusions. ISO 9001/QMS topic language without that structure is discovery-only. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to manufacturing deviation records in Australian contexts. Higher confidence identifies records of actual manufacturing departures from requirement (deviation/OOS/NCR identifiers with affected batch or lot and expected-versus-actual, disposition, or approval detail); deviation and batch-record vocabulary alone remains discovery-only.
Identifies documents containing references to product hazard analyses in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to release approval records in Australian contexts. Higher confidence identifies actual approval or authorisation records for a release (release/batch/ build/version identifier with a decision and approver/date detail) or the explicit release-approval label; product-release and generic sign-off vocabulary alone remains discovery-only.
Identifies maps or inventories that trace personal-data movement between systems — populated source-to-destination flow edges naming personal-data categories. PII-processing topic language (privacy notices, data-processing prose) without flow/lineage structure is discovery-only. This is privacy architecture / data-lineage content, not credential material.
Identifies references to secrets-vault exports and backups. Product or operation phrases are discovery-only; structured export-record fields support medium confidence and a populated secret entry plus export-manifest metadata supports high.
Identifies individual student enrolment records - student enrolment/enrollment records and forms, enrolment verification or confirmation, student registration, admission and course registration records - when the phrase sits with populated student identifiers and enrolment fields. Education records under applicable privacy law (FERPA in the US).
Identifies individual student grade and assessment records - grade records and books, assessment records and results, examination results, report cards, statements of results and mark sheets - when the phrase sits with populated student identifiers and grade/mark fields. Education records under applicable privacy law (FERPA in the US).
Identifies individual academic transcripts - official, academic or student transcripts, academic records, statements of academic record, records of results and course histories - when the phrase sits with populated student identifiers and transcript fields. Education records under applicable privacy law (FERPA in the US).
Identifies documents containing references to student disciplinary records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to student counseling records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies individual student financial aid applications - financial aid applications and award packages, student aid or loan applications, FAFSA, scholarship and bursary applications, fee waiver requests and hardship grant applications - when the phrase sits with populated applicant identifiers and household-finance fields. Financial and education records under applicable privacy law.
Identifies documents containing references to scholarship evaluation files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to exam answer scripts in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies admissions review notes about individual applicants - admissions reviews, decisions, committee notes and files, applicant evaluations, ratings and rankings, reader notes, offers of admission and acceptance/rejection letters - when the phrase sits with populated applicant identifiers and evaluation fields.
Identifies recommendation and reference letters about a named person - letters of recommendation or reference, referee reports and academic, character, professional or supervisor references - when the phrase sits with a named candidate and letter structure.
Identifies academic misconduct / plagiarism investigation files about an identified student or researcher: investigation vocabulary together with populated student and case fields (name, student ID, unit, assessment, similarity score, allegation, outcome).
Identifies documents containing references to campus incident reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to alumni donor records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to research participant consent files in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies submissions to, and decisions of, a human research ethics review body - IRB/HREC applications, submissions and approvals, ethics applications, protocol amendments and adverse event reports - when the phrase sits with populated protocol/investigator identifiers and submission fields. Committee descriptions alone remain discovery-only.
Identifies pre-publication thesis manuscripts, drafts and thesis datasets - unpublished theses, thesis data/manuscripts/drafts/chapters, dissertation drafts and embargoed thesis research - when the phrase sits with populated candidate/thesis fields and draft or dataset fields.
Identifies grant peer-review comments and assessment records containing substantive reviewer observations, scores, or funding outcomes. Grant-review and application phrases are retained for discovery at 65; populated assessment fields raise confidence to 75, while formal proposal or reviewer references plus an explicit funding outcome raise confidence to 85.
Identifies internal laboratory protocol records - laboratory protocols, lab notebooks, experiment logs, reagent preparation records and lab records - when the phrase sits with populated protocol/experiment record fields and experimental quantities. Research know-how rather than personal information.
Identifies documents containing references to customer profile master data in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to customer account credentials in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects customer purchase histories: a purchase / transaction / order history phrase combined with populated order data - rows keyed by a customer or order identifier, labelled order numbers, dates or totals, or labelled customer/member identifiers. Phrase-only mentions stay discovery-only.
Detects browsing behaviour logs and clickstream exports: a browsing history / clickstream / web analytics log phrase combined with populated log structure - URLs carrying a user or session identifier, web access log lines, or labelled visitor/session/device identifiers. Phrase-only mentions (privacy notices, cookie banners) stay discovery-only.
Detects loyalty programme balance records: a loyalty programme / points balance / frequent flyer phrase combined with populated member data - rows keyed by a member identifier, labelled points balances, status credits or tiers, or labelled membership numbers. Phrase-only mentions (programme terms, marketing) stay discovery-only.
Detects call centre audio recordings and transcripts: a call recording / call transcript phrase combined with populated call structure - audio file names, call metadata (call ID, interaction ID, ANI/CLI, agent), timestamped transcript turns or labelled customer fields. Phrase-only mentions (recording notices, policies) stay discovery-only.
Identifies documents containing captured customer messaging conversations in international contexts. Direct chat-transcript, customer-chat, live-chat, and chat-log anchors are retained; support-ticket wording is gated behind independent conversation-record context rather than treated as a transcript on its own, and generic customer-interaction, online-support, and customer-message phrasing no longer anchors detection.
Identifies documents containing references to customer complaint case files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects churn propensity score outputs: a churn propensity / churn score / attrition risk phrase combined with populated scoring data - rows keyed by a customer identifier with a score, labelled churn scores or risk bands, or labelled customer/subscriber identifiers. Phrase-only mentions stay discovery-only.
Detects fraud propensity score outputs: a fraud score / fraud risk score phrase combined with populated scoring data - rows keyed by a transaction or account identifier, labelled fraud scores, decisions or reason codes, or labelled account/transaction identifiers. Phrase-only mentions stay discovery-only.
Detects customer segmentation outputs: a customer segmentation / segment or cluster assignment phrase combined with populated assignment data - rows keyed by a customer identifier, labelled segment/cluster/persona values or labelled customer identifiers. Phrase-only mentions (marketing plans, strategy decks) stay discovery-only.
Detects marketing suppression / do-not-contact lists: a suppression list / do-not-contact / opt-out list phrase combined with populated contact data - email addresses, Australian phone numbers or labelled opt-out/suppression dates and reasons. Phrase-only mentions (Spam Act guidance, unsubscribe policies) stay discovery-only.
Detects consent and preference records: a consent record / consent register / marketing or privacy consent phrase combined with populated consent data - rows keyed by a customer identifier, labelled consent status/date/version values or labelled customer identifiers. Phrase-only mentions (privacy notices, cookie banners) stay discovery-only.
Detects contract usage analytics: a contract usage / licence utilisation / consumption report phrase combined with populated usage data - rows keyed by a customer or contract identifier, labelled licensed seats, active users, utilisation or overage values, or labelled customer/contract identifiers. Phrase-only mentions stay discovery-only.
Identifies documents containing references to invoice and payment history in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects refund and chargeback histories: a refund/chargeback/dispute history phrase combined with populated dispute data - rows keyed by an order or customer identifier, labelled chargeback amounts, reason codes, ARNs or dispute IDs, masked card numbers or labelled customer identifiers. Phrase-only mentions (refund policies) stay discovery-only.
Detects geofencing event histories: a geofence event / location history log phrase combined with populated location data - precise coordinate pairs, labelled geofence/zone values or labelled device/advertising identifiers. Phrase-only mentions (developer guides, app permissions) stay discovery-only.
Detects advertising attribution datasets: an ad / marketing / multi-touch attribution or conversion-tracking data phrase combined with populated identifiers - SHA-256 hashed emails or device IDs, click identifiers (gclid, fbclid, msclkid) or advertising IDs. Phrase-only mentions stay discovery-only.
Detects personalization feature vectors and user embeddings: a feature vector / user embedding / feature store export phrase combined with populated model data - numeric vectors, JSON records keyed by a user or customer ID, or labelled user identifiers. Phrase-only mentions (engineering guidance, course notes) stay discovery-only.
Detects escalated support case notes: an escalated case / escalation notes / complaint escalation phrase combined with populated case structure - case or ticket numbers, labelled customer fields, priority/severity values or timestamped note entries. Phrase-only mentions (escalation procedures) stay discovery-only.
Identifies documents containing references to taxpayer case management files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies individual welfare, social-assistance, and income-support eligibility decisions. Topic phrases are retained for discovery; enforcement requires applicant, household, income, dependant, means-test, benefit-category, outcome, review-right, or effective-date fields, and high confidence also requires a formal case/application reference or recorded eligibility decision.
Identifies individual unemployment-benefit, unemployment-insurance, JobSeeker, and re-employment assistance claims and determinations. Topic phrases are retained for discovery; enforcement requires claimant, employer, separation, earnings, job-search, obligation, benefit-period, payment-rate, or sanction fields, and high confidence also requires a formal claim reference or recorded decision.
Identifies documents containing references to public housing assistance files in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to child protection case files in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to foster care placement records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies individual disability assessment records - disability and functional capacity assessments, NDIS access requests, disability support pension impairment assessments and standardised functional assessment reports - when the phrase sits with populated person identifiers and assessment fields. Health and disability information under applicable privacy law.
Identifies individual pension entitlement records, benefit calculations, eligibility decisions, and payment determinations. Topic phrases are retained for discovery; enforcement requires member, service, retirement-date, salary, contribution, accrued-benefit, beneficiary, payment-frequency, gross-pension, or commutation fields, and high confidence also requires a formal member/claim reference or recorded entitlement decision.
Identifies documents containing references to immigration interview transcripts in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to asylum claim narratives in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to passport application packets in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies individual civil-status and vital-record amendments, including corrections to birth, death, marriage, and legal-name entries. Civil-registry topics are retained for discovery at 65; populated amendment fields raise confidence to 75, while a formal registry reference and personal status fields raise confidence to 85.
Identifies land-title and cadastral ownership records containing populated proprietor, tenure, parcel, legal-description, or encumbrance fields. Land-registry topics are retained for discovery at 65; populated register fields raise confidence to 75, while a formal title or parcel reference plus substantive ownership-interest evidence raise confidence to 85.
Identifies documents containing references to vehicle title and transfer records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies business and trade licence application records, including renewal and variation applications. Topic phrases are retained for discovery; enforcement requires at least two populated applicant, enterprise, premises, activity, or licence fields, and high confidence also requires a formal application, licence, or permit reference.
Identifies building, construction, development/planning, occupancy, and site-operating permit application records across jurisdictions. Topic phrases are discovery-only; enforcement requires multiple application fields, while high confidence also requires a labelled application, permit, case, or file reference plus authority or decision context.
Identifies documents containing references to inspection and enforcement records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to emergency aid request files in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to constituent service case notes in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies criminal history records and police identifying-particulars records (custody / booking photographs, photograph index numbers, fingerprints and other identifying particulars taken, linked to a named person, date of birth and police person numbers). Absorbs the former mugshot-image-repositories classifier. This information is personally identifiable law-enforcement information under applicable privacy regulations.
Identifies documents containing references to arrest records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to witness identity records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to investigation case notes in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to surveillance video evidence in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to call detail record datasets in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to ballistics evidence records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations. Coverage differentiates forensic ballistics records and findings from education and general firearms discussion; generic firearms-analysis language is discovery-only unless independent forensic case or examination-result evidence is present.
Identifies documents containing references to forensic dna profile records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to probation and parole files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies detention and custody records about an identified person (watch-house custody records, booking and intake records, prisoner and detainee records) with populated person and custody fields.
Identifies documents containing references to juvenile justice records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies sealed or suppressed court filings (documents filed under seal, sealed orders and indictments, suppression / non-publication orders) with populated proceeding and party fields.
Identifies documents containing references to plea negotiation documentation in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to victim impact statements in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Detects domestic abuse protective, restraining and barring orders, police-issued protection notices, and applications for them, when the document names the parties. Covers the generic English-language order names used across jurisdictions plus United States (order of protection, protection from abuse, domestic violence restraining order, temporary restraining order, injunction for protection), United Kingdom (non-molestation order, occupation order, DVPN/DVPO, domestic abuse protection notice/order, non-harassment order), Ireland (barring, interim barring and emergency barring orders; bare "safety order" is excluded as too generic), Canada (emergency protection order, peace bond) and New Zealand (Police Safety Order) instruments. Australian state and territory DFV orders are covered in more depth by au-dfv-protection-order; the slug is retained from the earlier topic-phrase classifier.
Identifies documents containing references to evidence handling logs in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to offensive cyber capability documentation in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Detects printed or prose PLC logic programs and program listings: ladder or rung listings with instruction text such as XIC(...)OTE(...), structured-text logic, program/routine/controller names and controller tags. Complements global-plc-project-export, which covers native L5X/L5K/TIA Openness/XEF export files; this pattern does not use those export-file anchors. Topic wording alone is discovery-only.
Detects distributed control system configuration records: DCS configuration/database/tag-list wording with instrument tags and populated setpoints, alarm limits, controller nodes, card/channel assignments and IP addresses. Topic wording alone is discovery-only.
Identifies substantive substation protection-relay settings and coordination records. Topic phrases are retained for discovery; enforcement requires a populated current, voltage, impedance, timing, or zone value, and high confidence also requires a substation, feeder, breaker, relay model, or device ID.
Identifies substantive pipeline pressure, flow, operating-limit, and control-setpoint records. Topic phrases are retained for discovery; enforcement requires a populated pressure or flow value, and high confidence also requires a pipeline segment, station, valve, control tag, or other live asset reference.
Identifies substantive water-treatment dosing formulas and control values. Topic phrases are retained for discovery; enforcement requires a populated dose, concentration, feed rate, or process value, and high confidence also requires a treatment-plant asset, process, or control-tag reference.
Identifies substantive electric-grid generation dispatch, unit-commitment, and power-system dispatch plans. Topic phrases are retained for discovery; enforcement requires populated generation, reserve, energy, or reactive-power quantities, and high confidence also requires current interval, generating unit, constraint, interconnector, or grid-operator detail.
Identifies substantive industrial plant shutdown, startup, emergency-shutdown, and turnaround procedures. Topic phrases are retained for discovery; enforcement requires ordered isolation, depressurisation, purge, valve, pump, permissive, interlock, handback, or verification actions, and high confidence also requires a populated equipment identifier, operating value, or timing.
Identifies substantive refinery process-control setpoint and operating-envelope records. Topic phrases are retained for discovery; enforcement requires an actual process value, and high confidence also requires a control-loop tag or named refinery process asset.
Detects rail signalling configuration data: interlocking or control-table wording with populated signal, route, points, track-circuit and balise identifiers plus overlap, release-timing, speed and chainage values. Topic wording alone is discovery-only.
Detects air traffic operational procedures: ATC unit, local operating or separation procedure wording with populated sector, frequency, waypoint, transfer-level and restriction fields and operational values (flight levels, runways, frequencies, distances). Topic wording alone is discovery-only.
Identifies substantive port-facility security and access manifests. Topic phrases are retained for discovery; enforcement requires vessel, port-call, berth, cargo, crew, visitor, escort, access-zone, gate, or security-level manifest content, and high confidence also requires a populated IMO, port-call, manifest, berth, zone, or ISPS security-level identifier.
Detects telecom core network configurations: mobile/IMS/EPC/5GC configuration wording with populated PLMN, APN, Diameter realm/peer, point-code and peer-address values, 3GPP realm FQDNs and core node names. Topic wording alone is discovery-only.
Identifies substantive emergency and critical-service restoration prioritisation plans. Topic phrases are retained for discovery; enforcement requires ranked assets/services, restoration sequence, dependencies, alternate supply, crew assignment, affected sites, service areas, or estimated restoration content, and high confidence also requires a populated priority, asset/site identifier, time, capacity, or customer-impact value.
Identifies substantive critical and maintenance spare-parts inventories. Topic phrases are retained for discovery; enforcement requires part-number, stock-on-hand, reorder, lead-time, storage, compatible-asset, supplier, or minimum-stock fields, and high confidence also requires a populated part, quantity, reorder, warehouse, bin, or location value.
Identifies substantive operational-technology, ICS, SCADA, and industrial-control cyber incident reports. Topic phrases are retained for discovery; enforcement requires case facts such as affected assets, timelines, initial access, containment, indicators, root cause, recovery, or operational impact, and high confidence also requires a concrete indicator, vulnerability, address, or control asset identifier.
Identifies substantive physical badge and door access-control maps. Topic phrases are retained for discovery; enforcement requires floor-plan, reader-to-door, security-zone, access-level, restricted-area, entry-point, zone-boundary, or credential-group relationships, and high confidence also requires populated door, reader, zone, entry, credential-group, or access-level identifiers.
Detects CCTV coverage and blind-spot analyses: CCTV survey or blind-spot wording with populated camera records (IDs, NVR channels, locations, FOV) and located coverage weaknesses. Topic wording alone is discovery-only.
Identifies substantive hazardous-material, dangerous-goods, and chemical storage maps. Topic phrases are retained for discovery; enforcement requires storage-area, containment-zone, chemical-name, dangerous-goods-class, segregation, spill-containment, or emergency-isolation relationships, and high confidence also requires a populated UN number, tank/store/cabinet/area identifier, or quantity.
Detects dam safety and integrity engineering reports: dam safety review, surveillance or inspection report wording with instrumentation readings (piezometers, seepage weirs, survey marks, reservoir levels) and located condition findings (seepage, cracking, erosion at the toe, spillway or abutment). Distinct from the referable-dam emergency action plan classifier, which covers EAP notification and inundation content. Topic wording alone is discovery-only.
Identifies documents containing references to enterprise data inventories in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to records of processing activities in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies matrices that map data or information categories to classification levels and handling controls. Topic phrases are retained for discovery; enforcement requires multiple matrix-column or control headings, and high confidence also requires a populated category-to-classification mapping.
Identifies documents containing references to data retention and deletion schedules in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to data protection impact assessments in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to cross-border transfer assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to standard contractual clause addenda in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to breach likelihood and impact assessments in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to vendor privacy due diligence reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to consent audit trail records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to data subject access request files in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to deletion request case files in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to privacy complaint investigations in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies pre-submission draft responses, reports, and submissions prepared for a regulator or supervisory authority. Topic phrases are retained for discovery; enforcement requires reporting-period, event, proposed-disclosure, affected-record, data-quality, control, corrective-action, legal-review, or outstanding-evidence content, and high confidence also requires approval, submission, clearance, comment, deadline, or regulator-reference workflow evidence.
Identifies documents containing references to compliance monitoring outputs in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to ethics committee decision records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to policy attestation records in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to model risk assessment reports in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to algorithmic impact assessments in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to third-party assurance attestations in Australian contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to voter roll extract files in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to absentee ballot tracking data in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to election incident response records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to campaign donor identity records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to politically exposed person assessment files in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to diplomatic cable traffic in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to treaty negotiation drafts in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to sanctions policy drafts in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to export license decision files in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to embargo enforcement case records in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to pre-release national budget drafts in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to national emergency response plans in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to strategic communications plans in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies operational government media war-room plans used to coordinate monitoring, rapid response, approvals, rebuttals, and spokesperson activity. War-room plan topics are retained for discovery; enforcement requires independent government-office context and multiple operational workflow elements, and high confidence also requires populated assignments, times, or issue references.
Identifies documents containing references to leak investigation records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to whistleblower protection case records in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to sovereign debt issuance plans in international contexts. This information type is classified as personally identifiable information under applicable data protection regulations.
Identifies documents containing references to central bank intervention plans in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Identifies documents containing references to census microdata in Australian contexts. This information type is classified as personally identifiable information under the Privacy Act 1988.
Detects references to trade union membership: union member status, union dues, shop stewards, collective bargaining unit membership and union local numbers. GDPR Article 9 lists trade union membership as a special category of personal data with no fixed format — detectable only by topic vocabulary. Topic-grade detector.
Detects URL patterns.
Detects Greece driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Αστυνομική Ταυτότητα patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Greece passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Greece Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects ΑΜΚΑ patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Greek Tax identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects 香港身份證 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Hong Kong Special Administrative Region (HKSAR) passport numbers issued by the Immigration Department under the HKSAR Passports Ordinance (Cap. 539). HKSAR passport numbers are nine characters: the current series is the letter H followed by 8 digits; earlier biometric series used K followed by 8 digits, and KJ (48-page jumbo booklets) followed by 7 digits.
Detects Croatia driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Osobna iskaznica patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Croatia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Osobni identifikacijski broj (OIB) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Croatia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Hungary driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Hungary passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Személyi szám patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Hungary Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects TAJ szám patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Hungary Tax identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Indonesia drivers license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Kartu Tanda Penduduk (KTP) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Indonesian taxpayer identification numbers (NPWP). Classic NPWP is 15 digits commonly formatted 01.234.567.8-012.000; newer 16-digit forms align with NIK for individuals under tax reform.
Detects Indonesia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ireland driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ireland passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ireland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Uimhir PSP patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Israel Bank Account Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
Detects Teudat Zehut patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Aadhaar patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects India driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects PAN patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Indian passport numbers issued by the Ministry of External Affairs. The standard format is a single letter (A-Z excluding Q, X and Z, which are not used as the leading character) followed by 7 digits, sometimes printed with a space between the letter and the digits (e.g. 'K1234567' or 'K 1234567'). Corroborative keyword proximity is strongly recommended because the body is only 7 digits.
Detects Indian mobile telephone numbers per the Department of Telecommunications' National Numbering Plan 2003 (as amended): 10-digit mobile numbers with a constrained leading digit (6-9, expanded from 7-9 to include 6 when DoT authorized 6-series allocation in 2017), in both the bare domestic form and the +91 international form (leading 0 dropped). Landline/STD (Subscriber Trunk Dialling) numbers are intentionally out of scope: STD codes vary 2-8 digits with no verified structural rule constraining their leading digit, so a regex loose enough to cover them (just "10 digits after a leading 0") would be barely tighter than matching any 11-digit sequence — far too high a digit-collision risk to ship without a genuinely verified constraint. See false_positives.
Detects Employees Provident Fund Organisation (EPFO) Universal Account Numbers (UAN). UAN is a 12-digit number assigned to employees to link multiple PF member IDs across employers. Leading digit is non-zero.
Detects Unified Payments Interface (UPI) Virtual Payment Addresses (VPA / UPI ID) used in India. Format is a local part and a payment-service provider handle separated by @ (for example name@oksbi or business@ybl). Handles are alphabetic PSP codes; local parts allow letters, digits, dot, underscore and hyphen.
Detects Electoral Photo Identity Card (EPIC) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Iceland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Codice Fiscale patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Italy driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Italy passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Italian mobile telephone numbers per AGCOM's national numbering plan (Delibera n. 8/15/CIR, Allegato A): the mobile/personal-communications block, structurally defined as "3XYZ" plus six further digits (a 10-digit total for numbering assigned under the current plan), in both the domestic and +39 international forms. The delibera permits already-assigned legacy 9-digit mobile numbering to persist, so any surviving legacy 9-digit mobile numbers are a known potential false negative of this 10-digit regex — kept at 10 digits deliberately, since evidence that live 9-digit stock persists today is inconclusive and loosening the length bound would raise digit collision for every match. Geographic (landline) numbers are intentionally out of scope: the AGCOM plan family bounds geographic numbers at a 10-11 digit total (11 maximum), but within that bound the "0" block's second digit is structurally unconstrained and the minimum/per-prefix length variability across the legacy short-number stock is not verified from a primary source — a 0-prefixed regex spanning that length range with no second-digit constraint would be highly collision-prone — and Italian landline numbers are also the one well-known exception where the leading 0 is retained even in the +39 international form, a further formatting axis to model. Mobile numbers carry no such leading-0 quirk (they never had a leading 0 to begin with).
Detects Italy Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Japan Bank Account Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
Detects Japan driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects My Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Japan passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Japan Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects 在留カード番号 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects 住民票コード patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects 社会保険番号 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Kenya national identity card numbers (typically 7-8 digits).
Detects South Korea driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects South Korea passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Korea Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects RRN patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Liechtenstein Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Lithuania driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Lithuania passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Asmens kodas patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Lithuania Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Luxembourg driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Numéro d'identification national (entités) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Numéro d'identification national patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Luxembourg passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Luxembourg Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Latvia driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Latvia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Personas kods patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Latvia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Malta driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Karta tal-Identità patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Malta passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Malta Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Malta Tax ID Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Mexican CLABE (Clave Bancaria Estandarizada) numbers used for SPEI interbank transfers. CLABE is an 18-digit standardized bank account number including bank code, branch, account and check digit.
Detects CURP patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Mexican passport numbers issued by the Secretaría de Relaciones Exteriores (SRE). Older passports use a single letter followed by 7-8 digits; newer books carry an 8-9 character alphanumeric serial. Mixed alphanumeric serials are broad candidates that also match order IDs, booking codes, and product serials — they are not treated as Mexican passport numbers without issuer or passport-document evidence. Because the format is short and loosely structured, corroborative keyword proximity is strongly recommended to reduce false positives.
Detects Mexican RFC (Registro Federal de Contribuyentes) taxpayer identifiers in both official formats: the 13-character natural-person form (4-letter name stem + 6-digit date + 3-character homoclave) and the 12-character legal-entity form (3-character name stem, which may include Ñ or &, + 6-digit date + 3-character homoclave).
Detects MyKad patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Malaysia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Malaysian individual Tax Identification Numbers (TIN / Nombor Pengenalan Cukai) issued by the Inland Revenue Board of Malaysia (LHDN / HASiL). Since 2 January 2023 individual TINs use the prefix IG followed by 9-11 digits (11-13 characters total); the legacy individual prefixes SG (employment income) and OG (business income) with the same digit range remain in circulation in older records. Entity TINs (C, D, F, PT, TA and similar prefixes) are deliberately out of scope: single-letter prefixes over a digit run are too collision-prone and entity TINs are not personal data.
Detects Nigeria National Identification Numbers (NIN) — 11 digits from NIMC.
Detects BSN patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Netherlands driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Netherlands passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Dutch national telephone numbers per the ACM-administered numbering plan: 10-digit numbers (leading trunk 0 included) covering geographic numbers (area code first significant digit 1-5 or 7, e.g. 020 Amsterdam, 010 Rotterdam, 070 Den Haag) and mobile numbers (06 prefix), plus the +31 international form (leading 0 dropped), including the widespread "+31 (0)6 12345678" letterhead rendering (a common-but-nonstandard practice — ITU-T E.123 advises against the parenthesised trunk digit in international notation, but it is ubiquitous on Dutch letterheads, so it is matched for detection purposes). Numbers beginning 08 (0800 free-of-charge service numbers, 088 non-geographic business lines) and 09 (0900/0906/0909 premium-rate information numbers) are intentionally out of scope — these are organizational/service numbers rather than personal PII, mirroring how uk-phone-number and fr-phone-number scope out their own non-geographic service ranges. Note this also excludes the 085 and 091 location-independent subscriber ranges (VoIP numbers ACM makes available to individuals as well as businesses): a personal 085/091 VoIP line is therefore a known false negative, accepted because the 085/088/091 block is predominantly organizational in practice and cannot be split from it structurally.
Detects Netherlands Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Netherlands Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Fødselsnummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Norwegian passport numbers issued by the police (politiet). The 2020 series uses a nine-character document number: ordinary (C) and emergency (K) passports are one prefix letter plus two characters that may be letters or digits plus six digits (specimen CCC002251); diplomatic (FG), service (FH), special (FJ), travel-document (FK) and foreigner (FL) passports are a two-letter prefix plus one letter-or-digit plus six digits. Pre-2020 series passports (in circulation until October 2030) carry an eight-digit document number.
Detects Norway Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects New Zealand bank account number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
Detects New Zealand driver license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects New Zealand Inland Revenue number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects New Zealand Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects New Zealand Social Welfare Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the generic numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Peru Documento Nacional de Identidad (DNI) numbers — 8 digits.
Detects Philippine Identification System (PhilSys) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Philippines passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Philippines PhilHealth Identification Numbers (PIN) in the common dashed format ##-#########-# (12 digits). Used for national health insurance membership and claims.
Detects Philippines Social Security System (SSS) numbers in the common dashed format ##-#######-# (10 digits total). Continuous digit forms are intentionally out of scope to reduce collision with other national identifiers.
Detects Philippine Taxpayer Identification Numbers (TIN) issued by the Bureau of Internal Revenue (BIR) under Section 236(j) of the National Internal Revenue Code. The base TIN is a 9-digit number (the 9th digit is a check digit), usually written XXX-XXX-XXX. Registered businesses append a branch code — historically 3 digits (000 for the head office, 12 digits total) and, since eBIRForms v7.9.6.0 (RMC No. 36-2026, April 2026), up to 5 digits (14 digits total).
Detects UMID patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Poland driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Dowód osobisty patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Poland passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects PESEL patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Poland Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects REGON patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Poland Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Cartão de Cidadão patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Portugal driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Portugal passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Portuguese Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Portugal Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects بطاقة الهوية القطرية patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Romania driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Romania passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Cod Numeric Personal patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Romania Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Russian domestic passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Russian international passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Russia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Russian Taxpayer Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Saudi Arabian Iqama (residence permit) numbers issued to expatriate residents. Iqama numbers are 10 digits and start with 2. Saudi national IDs start with 1 and are covered by sa-national-id.
Detects National Id patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Sweden driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Sweden passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Personnummer patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Sweden Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Sweden Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Singapore driving license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects NRIC patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Singapore passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Singapore Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Slovenia driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Enotna matična številka občana (EMŠO) patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Slovenia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Slovenia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Slovenia Tax Identification Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Due to the numeric format, corroborative evidence keywords are essential for reliable detection.
Detects Slovakia driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Slovakia passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Rodné číslo patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Slovakia Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects Thai passport numbers issued by the Department of Consular Affairs, Ministry of Foreign Affairs of Thailand. Documented formats are one letter followed by six digits (older series, e.g. A123456), two letters followed by six digits (e.g. AA123456), or two letters followed by seven digits (current e-passport series, e.g. AA1234567, nine characters total matching the MRZ document-number field). Note: the legacy A123456 / AA123456 forms are documented by a single source (Thai Wikipedia); the current AA1234567 form is corroborated independently via the MRZ document-number field.
Detects เลขประจำตัวประชาชน patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects T.C. Kimlik Numarası patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Turkish (Türkiye) ordinary ("umuma mahsus", bordo/burgundy) passport numbers. New-generation ordinary passports, issued by the General Directorate of Civil Registration and Citizenship (Nüfus ve Vatandaşlık İşleri Genel Müdürlüğü, NVİ) since 2018, carry a nine-character document number consisting of the series letter "U" followed by eight digits (e.g. U12345678), printed in the top-right corner of the data page. Turkish sources report different series letters for the special/green (hususi, "S") and service/grey (hizmet, "Z") passports; those series are NOT covered by this pattern because their letter-plus-digit shape could not be independently corroborated. Ordinary bordo passports are by far the dominant variant.
Detects Turkey Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects the Turkish tax identification number (Vergi Kimlik Numarası, VKN) issued by the Turkish Revenue Administration (Gelir İdaresi Başkanlığı, GİB). The VKN is a 10-digit number structured as a 3-digit alpha group code (001-999), a 6-digit sequence number and a single check digit. Since 1 July 2006 Turkish citizens use their 11-digit T.C. Kimlik Numarası as their tax number (covered by the separate tr-national-id pattern); the 10-digit VKN remains the tax identifier for legal entities, ordinary partnerships, foreign legal entities and foreign nationals without a Foreign Identity Number.
Detects 國民身分證統一編號 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Taiwan passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Taiwan Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects 外僑居留證 / 台灣地區居留證 patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ukraine domestic passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ukraine international passport number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Ukraine Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects the Ukrainian individual tax number — the registration number of the taxpayer's account card (РНОКПП / RNOKPP, historically called RNTRC or ІПН), assigned by the State Tax Service of Ukraine to every individual taxpayer in the State Register of Individuals – Taxpayers. Per the OECD AEOI TIN description for Ukraine, the RNOKPP is a ten-digit numerical code (no letters, hyphens, or other symbols) with structure XXXXXNNNNK: a 5-digit birth-date registration sequence, a 4-digit account-card sequence, and a control digit.
Detects Scottish Community Health Index (CHI) 10-digit patient identifiers used by NHS Scotland.
>- This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation. Detects UK driving licence numbers. GB licences follow a 16-character format encoding surname, date of birth, and gender. Northern Ireland licences are 8-digit numbers.
Detects Electoral Roll Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects National Insurance Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects NHS Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Passport patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects UK national telephone numbers per Ofcom's National Telephone Numbering Plan: geographic numbers (01/02 prefix) and mobile numbers (07 prefix, second digit restricted to 1-5 or 7-9, plus the 07624 Isle of Man mobile range — the one mobile block inside the otherwise-excluded 076 radiopaging range, allocated to Isle of Man operators under the UK plan; 070 personal-numbering and the rest of 076 remain excluded), both as 11-digit domestic strings (leading 0 + 10 significant digits), plus the +44 international form (10 significant digits, leading 0 dropped per ITU/Ofcom convention). Digit groups after the initial prefix use a flexible per-digit optional separator rather than a single fixed grouping, because Ofcom's numbering plan allows multiple valid group-length conventions (4+6, 3+7, 2+8, 5+5) that vary by area. Two additional conventional renderings are covered: the parenthesised-area-code national notation for geographic numbers, e.g. "(020) 7946 0958" / "(01632) 960960" (ITU-T E.123 national notation, parentheses marking the optionally-dialled area code, for 2-5 digit area codes), and the widespread "+44 (0)20 7946 0958" letterhead form (a common-but-nonstandard practice — E.123 advises against the parenthesised trunk digit in international notation, but it is ubiquitous in UK signatures and letterheads, so it is matched for detection purposes). Non-geographic service numbers (03/08/09) are intentionally out of scope — they are typically organizational/service numbers rather than personal PII, mirroring how au-fixed-line-telephone scopes to geographic numbers only.
Detects U.K. Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects the paired UK domestic bank sort code (6 digits, written XX-XX-XX, XX XX XX, or XXXXXX) and account number (8 digits) as they normally appear together in UK bank-detail blocks (invoices, remittance advice, payroll/BACS instructions). Both digit groups must be directly attached to their own label ("sort code" / "account number" or "a/c no") in either order — bare unlabelled 6- or 8-digit sequences are never matched, because unlabelled digit sequences of this length collide heavily with dates, phone extensions, invoice numbers, and other structured identifiers.
Detects Unique Taxpayer Reference patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects USCIS Alien Registration Numbers (A-Numbers). An A-Number is the unique identifier the Department of Homeland Security assigns to a noncitizen: the letter "A" followed by 7-9 digits, written compactly (A012345678) or grouped (A-123-456-789). A-Numbers appear on Green Cards, EADs, immigration court records, and Form I-9 / E-Verify data held by virtually every U.S. employer.
Detects U.S. Bank Account Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
A multi-state helper for detecting U.S. driver's license numbers using the real structural formats of several high-population states, rather than the broad "letter + 7-12 digits" catch-all. Covers California, New York, Texas, Florida, New Jersey, and Illinois. This is a companion to the generic us-drivers-license pattern (which it does not replace); use it when you want tighter, state-aware matching for those jurisdictions.
Detects U.S. driver's license number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects Employer Identification Number patterns.
Detects student identifiers that appear in education records protected under the Family Educational Rights and Privacy Act (FERPA). Student ID formats are institution-specific, so this pattern anchors on an explicit student/enrolment/SIS context label immediately preceding a 6-12 character alphanumeric ID, and relies on education-record keywords (transcript, GPA, enrollment, registrar) for corroboration.
Detects US Individual Taxpayer Identification Numbers (ITINs) issued by the IRS to individuals who are required to have a US taxpayer identification number but are not eligible for a Social Security Number. ITINs always begin with the digit 9, and the fourth and fifth digits fall in the range 70-99, distinguishing them from SSNs. The pattern matches both formatted (9XX-7X-XXXX) and unformatted (9XX7XXXXX) variants.
Detects US passport numbers in exactly two accepted formats: a nine-digit numeric value (older US passports), or a single uppercase letter followed by exactly eight digits (newer passport books and cards). Bare eight-digit values and letter-plus-nine-digit values are not valid US passport numbers. Due to the relatively simple format, corroborative keyword proximity is strongly recommended to reduce false positives. Keywords are US-scoped (passport / US passport / State Department); foreign-passport labels are not treated as US passport evidence.
Detects North American Numbering Plan (NANP) telephone numbers in US contexts: the domestic NPA-NXX-XXXX form (bracketed, hyphenated, dotted, spaced, or bare, with an optional leading trunk "1") and the international +1 NPA-NXX-XXXX form. Area-code (NPA) and exchange-code (NXX) groups are constrained to a leading digit of 2-9 with the N11 service-code shape (211/311/411/511/611/711/811/911) excluded from both groups, per NANPA's published format rules. NANP area codes are drawn from a single pool shared by the US, Canada, and Caribbean member territories — the digit structure itself cannot distinguish a US number from a Canadian one (see ca-phone-number for the sibling pattern). Differentiation between the two patterns is by jurisdiction/regulation metadata and country-specific corroborative evidence keywords only, not by regex — this is the documented convention for the whole NANP pair.
Detects U.S. Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects US Social Security Numbers (SSNs) in both formatted (XXX-XX-XXXX) and unformatted (XXXXXXXXX) representations. The pattern excludes invalid SSN ranges including area numbers 000, 666, and 900-999, group numbers 00, and serial numbers 0000, in accordance with SSA assignment rules. SSNs are critical PII used across healthcare, financial, and government contexts.
Detects Vietnam Citizen Identity Card numbers (Căn cước công dân / CCCD). Modern chip-card numbers are 12 digits beginning with 0, embedding gender/century and place-of-birth codes.
Detects Id Number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Users already running Purview may prefer to enable the built-in SIT directly, or use this version as a starting point for customisation.
Detects South African passport numbers issued by the Department of Home Affairs under the South African Passports and Travel Documents Act 4 of 1994. Passport numbers are nine characters: one uppercase prefix letter identifying the passport type — A (normal/tourist), M (maxi), E (official), D (diplomatic), T (travel document) — followed by eight digits (SARS documents current issuance as starting A0, M0, E0).
Detects South Africa Physical Addresses patterns. This pattern is based on a Microsoft Purview built-in sensitive information type that uses machine learning and function-based detection for physical address identification. This keyword list provides address-related terms for supplementary matching.
Detects South African income tax reference numbers (TIN) allocated by the South African Revenue Service (SARS) under section 24 of the Tax Administration Act, 2011. The number is ten digits, may only start with 0, 1, 2, 3 or 9, and its tenth digit is a check digit computed with a modulus-10 (Luhn-style) algorithm documented by SARS.