Credit Card Number
Catalogue reference for the Microsoft Purview built-in Credit Card Number sensitive information type, which detects a payment card number for the major card brands passing the Luhn check, with card keywords, expiry dates or known BIN context. Microsoft recommends high confidence (85) for the built-in entity. This YAML-only record lets a package recipe include the Microsoft entity explicitly; it does not reproduce Microsoft's built-in regular expressions, keyword dictionaries, checksums or XML.
- Type
- keyword_list
- Confidence
- medium
- Confidence justification
- Medium confidence for this YAML-only record: its keyword logic finds references to the built-in entity name with Microsoft Purview context, not populated values. Microsoft's own recommended confidence for the entity is 85. The record does not claim to reproduce Microsoft's proprietary detection logic.
- Jurisdictions
- global
- Regulations
- CCPA/CPRA, GDPR
- Frameworks
- ISO 27001, ISO 27701, PCI-DSS, SOC 2
- Data categories
- pii, financial
- Scope
- specific
- Risk rating
- 8
Should match
Credit Card Number built-in SIT— Microsoft built-in entity nameCredit Card Numbers catalogue reference— Name variant used for registry discoveryDLP policy inventory - Microsoft Purview Rule: Builtin-global-credit-card-number Condition: Credit Card Number (built-in entity 50842eb7-edc8-4019-85dd-5a5c1f2bb085), high confidence, instance count 1 or more Action: notify sender— DLP rule inventory row naming the built-in entity with Microsoft Purview context
Should not match
Card number: 4111 1111 1111 1111— Populated value or sibling reference without the built-in entity namePayment card track data guidance— Populated value or sibling reference without the built-in entity nameDebit card replacement form— Populated value or sibling reference without the built-in entity name
Known false positives
- Documentation and policy inventories can mention the Microsoft built-in entity by name. Mitigation: Treat this YAML-only record as catalogue discovery; enable the Microsoft entity for value detection.
- The custom SIT global-payment-card-pan detects the same data; deploying both doubles matches on the same content. Mitigation: Pick one per package. The custom SIT is the default; include this built-in only by an explicit recipe decision.