Security Engines - SmartDLP - Built-in detection rules

This document describes the built-in rules offered by SmartDLP.




Advertising identifier

Identifiers used by developers to track users for advertising purposes. These include Google Play Advertising IDs, Amazon Advertising IDs, Apple's identifierForAdvertising (IDFA), and Apple's identifierForVendor (IDFV).

Age of an individual

An age measured in months or years.

Credit card number

A credit card number is 12 to 19 digits long. They are used for payment transactions globally.

Credit card track number

A credit card track number is a variable length alphanumeric string. It is used to store key cardholder information.

Date of birth

A date of birth. 

Domain name

A domain name as defined by the DNS standard.

Email address

An email address identifies the mailbox that emails are sent to or from. The maximum length of the domain name is 255 characters, and the maximum length of the local-part is 64 characters.

Ethnic group

A person’s ethnic group.

Female name

A common female name. 

First name

A first name is defined as the first part of a Person Name. 


A person’s gender identity.

Generic id

Alphanumeric and special character strings that may be personally identifying but do not belong to a well-defined category, such as user IDs or medical record numbers.

IBAN code

An International Bank Account Number (IBAN) is an internationally agreed-upon method for identifying bank accounts defined by the International Standard of Organization (ISO) 13616:2007 standard. The European Committee for Banking Standards (ECBS) created ISO 13616:2007. An IBAN consists of up to 34 alphanumeric characters, including elements such as a country code or account number.

HTTP cookie and set-cookie headers

An HTTP cookie is a standard way of storing data on a per website basis. This detector will find headers containing these cookies.

ICD9 code

The International Classification of Diseases, Ninth Revision, Clinical Modification (ICD-9-CM) lexicon is used to assign diagnostic and procedure codes associated with inpatient, outpatient, and physician office use in the United States. The US National Center for Health Statistics (NCHS) created the ICD-9-CM lexicon. It is based on the ICD-9 lexicon, but provides for more morbidity detail. The ICD-9-CM lexicon is updated annually on October 1.

ICD10 code

Like ICD-9-CM codes, the International Classification of Diseases, Tenth Revision, Clinical Modification (ICD-10-CM) lexicon is a series of diagnostic codes. The World Health Organization (WHO) publishes the ICD-10-CM lexicon to describe causes of morbidity and mortality.

Patient Information

Detects leaked medical patient information. The detection is based on matching health codes and various personal information patterns.

Phone IMEI number

An International Mobile Equipment Identity (IMEI) hardware identifier, used to identify mobile phones.

IP address

An Internet Protocol (IP) address (either IPv4 or IPv6).

Last name

A last name is defined as the last part of a Person Name.

Street addresses and landmarks

A physical address or location. 

MAC address

A media access control address (MAC address), which is an identifier for a network adapter.

Local MAC address

A local media access control address (MAC address), which is an identifier for a network adapter.

Male name

A common male name.

Medical term

Terms that commonly refer to a person's medical condition or health. 

Organization name

A name of a chain store, business or organization.

Passport Number

A passport number that matches passport numbers for the following countries: Australia, Canada, China, France, Germany, Japan, Korea, Mexico, The Netherlands, Poland, Singapore, Spain, Sweden, Taiwan, United Kingdom, and the United States.

Person name

A full person name, which can include first names, middle names or initials, and last names. 

Phone number

A telephone number.

Street address

A street address. 

Bank SWIFT routing number

A SWIFT code is the same as a Bank Identifier Code (BIC). It's a unique identification code for a particular bank. These codes are used when transferring money between banks, particularly for international wire transfers. Banks also use the codes for exchanging other messages.

Date or Time

A date. This Rule name includes most date formats, including the names of common world holidays. 

Human readable time

A timestamp of a specific time of day, e.g. 9:54 pm.


A Uniform Resource Locator (URL).

Vehicle identification number

A vehicle identification number (VIN) is a unique 17-digit code assigned to every on-road motor vehicle.

Credentials and secrets

Rule name


Authentication token

An authentication token is a machine-readable way of determining whether a particular request has been authorized for a user. This detector currently identifies tokens that comply with OAuth or Bearer authentication.

Amazon Web Services credentials

Amazon Web Services account access keys.

Azure JSON web token

Microsoft Azure certificate credentials for application authentication.

HTTP Basic authentication header

A basic authentication header is an HTTP header used to identify a user to a server. It is part of the HTTP specification in RFC 1945, section 11.

Encryption key

An encryption key within configuration, code, or log text.

Google Cloud Platform API key

Google Cloud API key. An encrypted string that is used when calling Google Cloud APIs that don't need to access private user data.

Google Cloud Platform service account credentials

Google Cloud service account credentials. Credentials that can be used to authenticate with Google API client libraries and service accounts.

JSON web token

JSON Web Token. JSON Web Token in compact form. Represents a set of claims as a JSON object that is digitally signed using JSON Web Signature.


Clear text passwords in configs, code, and other text.

Top 100,000 most common weakly hashed passwords

A weakly hashed password is a method of storing a password that is easy to reverse engineer. The presence of such hashes often indicate that a system's security can be improved.

Common headers containing XSRF tokens

An XSRF token is an HTTP header that is commonly used to prevent cross-site scripting attacks. Cross-site scripting is a type of security vulnerability that can be exploited by malicious sites.


Rule name


Argentina identity card number

An Argentine Documento Nacional de Identidad (DNI), or national identity card, is used as the main identity document for citizens.


Rule name


Australia driver’s license number

An Australian driver's license number.

Australia medicare number

A 9-digit Australian Medicare account number is issued to permanent residents of Australia (except for Norfolk island). The primary purpose of this number is to prove Medicare eligibility to receive subsidized care in Australia.

Australia passport number

An Australian passport number.

Australia tax file number

An Australian tax file number (TFN) is a number issued by the Australian Tax Office for taxpayer identification. Every taxpaying entity, such as an individual or an organization, is assigned a unique number.


Rule name


Belgium National Identity card number

A 12-digit Belgian national identity card number.


Rule name


Brazil individual taxpayer identification number

The Brazilian Cadastro de Pessoas Físicas (CPF) number, or Natural Persons Register number, is an 11-digit number used in Brazil for taxpayer identification.


Rule name


Canada bank account number

A Canadian bank account number.

British Columbia public health network number

The British Columbia Personal Health Number (PHN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of British Columbia.

Canada driver’s license number

A driver's license number for each of the ten provinces in Canada (the three territories are currently not covered).

Ontario health insurance number

The Ontario Health Insurance Plan (OHIP) number is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Ontario.

Canada passport number

A Canadian passport number.

Quebec health insurance number

The Québec Health Insurance Number (also known as the RAMQ number) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Québec.

Canada social insurance number

The Canadian Social Insurance Number (SIN) is the main identifier used in Canada for citizens, permanent residents, and people on work or study visas. With a Canadian SIN and mailing address, one can apply for health care coverage, driver's licenses, and other important services.


Rule name


Chile identity card number

A Chilean Cédula de Identidad (CDI), or identity card, is used as the main identity document for citizens.


Rule name


China resident number

A Chinese resident identification number.

China passport number

A Chinese passport number.


Rule name


Colombia identity card number

A Colombian Cédula de Ciudadanía (CDC), or citizenship card, is used as the main identity document for citizens.


Rule name


Denmark CPR Number

A Personal Identification Number (CPR, Det Centrale Personregister) is a national ID number in Denmark. It is used with public agencies such as health care and tax authorities. Banks and insurance companies also use it as a customer number. The CPR number is required for people who reside in Denmark, pay tax or own property there.


Rule name


France national identity card number

The French Carte Nationale d'Identité Sécurisée (CNI or CNIS) is the French national identity card. It's an official identity document consisting of a 12-digit identification number. This number is commonly used when opening bank accounts and when paying by check. It can sometimes be used instead of a passport or visa within the European Union (EU) and in some other countries.

France national insurance number

The French Numéro d'Inscription au Répertoire (NIR) is a permanent personal identification number that's also known as the French social security number for services including healthcare and pensions.

France passport number

A French passport number.

France tax identification number

The French tax identification number is a government-issued ID for all individuals paying taxes in France.


Rule name


Finland personal identity code

A Finnish personal identity code, a national government identification number for Finnish citizens used on identity cards, driver's licenses and passports.


Rule name


Germany driver's license number

A German driver's license number.

German identity card number

The German Personalausweis, or identity card, is used as the main identity document for citizens of Germany.

Germany passport number

A German passport number. The format of a German passport number is 10 alphanumeric characters, chosen from numerals 0–9 and letters C, F, G, H, J, K, L, M, N, P, R, T, V, W, X, Y, Z.

Germany taxpayer identification number

An 11-digit German taxpayer identification number assigned to both natural-born and other legal residents of Germany for the purposes of recording tax payments.

Germany Schufa identification number

A German Schufa identification number. Schufa Holding AG is a German credit bureau whose aim is to protect clients from credit risk.

Hong Kong

Rule name


Hong Kong identity card number

The 香港身份證, or Hong Kong identity card (HKIC), is used as the main identity document for citizens of Hong Kong.


Rule name


India Aadhaar number

The Indian Aadhaar number is a 12-digit unique identity number obtained by residents of India, based on their biometric and demographic data.

India GST identification number

The Indian GST identification number (GSTIN) is a unique identifier required of every business in India for taxation.

India permanent account number

The Indian Personal Permanent Account Number (PAN) is a unique 10-digit alphanumeric identifier used for identification of individuals—particularly people who pay income tax. It's issued by the Indian Income Tax Department. The PAN is valid for the lifetime of the holder.


Rule name


Indonesia identity number (Nomor Induk Kependudukan)

An Indonesian Single Identity Number (Nomor Induk Kependudukan, or NIK) is the national identification number of Indonesia. The NIK is used as the basis for issuing Indonesian resident identity cards (Kartu Tanda Penduduk, or KTP), passports, driver's licenses and other identity documents.


Rule name


Ireland driving license number

An Irish driving license number.

Ireland Eircode

Eircode is an Irish postal code that uniquely identifies an address.

Ireland passport number

An Irish (IE) passport number.

Ireland Personal Public Service Number (PPSN)

The Irish Personal Public Service Number (PPS number, or PPSN) is a unique number for accessing social welfare benefits, public services, and information in Ireland.


Rule name


Israel identity card number

The Israel identity card number is issued to all Israeli citizens at birth by the Ministry of the Interior. Temporary residents are assigned a number when they receive temporary resident status.


Rule name


Italy fiscal code number

An Italy fiscal code number is a unique 16-digit code assigned to Italian citizens as a form of identification.


Rule name


Japan bank account number

A Japanese bank account number.

Japan driver's license number

A Japanese driver's license number.

Japan individual number or "My Number"

The Japanese national identification number—sometimes referred to as "My Number"—is a new national ID number as of January 2016.

Japan passport number

A Japanese passport number. The passport number consists of two alphabetic characters followed by seven digits.


Rule name


Korea passport number

A Korean passport number.

Korea resident registration number

A South Korean Social Security number.


Rule name


Mexico population registry number

The Mexico Clave Única de Registro de Población (CURP) number, or Unique Population Registry Code or Personal Identification Code number. The CURP number is an 18-character state-issued identification number assigned by the Mexican government to citizens or residents of Mexico and used for taxpayer identification.

Mexico passport number

A Mexican passport number.

The Netherlands

Rule name


Netherlands citizen service number

A Dutch Burgerservicenummer (BSN), or Citizen's Service Number, is a state-issued identification number that's on driver's licenses, passports, and international ID cards.

Netherlands passport number

A Dutch passport number.


Rule name


Norway national identity number

Norway‘s Fødselsnummer, National Identification Number, or Birth Number is assigned at birth, or on migration into the country. It is registered with the Norwegian Tax Office.


Rule name


Paraguay identity card number

A Paraguayan Cédula de Identidad Civil (CIC), or civil identity card, is used as the main identity document for citizens.


Rule name


Peru identity card number

A Peruvian Documento Nacional de Identidad (DNI), or national identity card, is used as the main identity document for citizens.


Rule name


Poland PESEL number

The PESEL number is the national identification number used in Poland. It is mandatory for all permanent residents of Poland, and for temporary residents staying there longer than 2 months. It is assigned to just one person and cannot be changed.

Poland national id number

The Polish identity card number. is a government identification number for Polish citizens. Every citizen older than 18 years must have an identity card. The local Office of Civic Affairs issues the card, and each card has its own unique number.

Poland Passport

A Polish passport number. Polish passport is an international travel document for Polish citizens. It can also be used as a proof of Polish citizenship.


Rule name


Portugal identity card number

A Portuguese Cartão de cidadão (CDC), or Citizen Card, is used as the main identity, Social Security, health services, taxpayer, and voter document for citizens.


Rule name


Singapore national registration number

A unique set of nine alpha-numeric characters on the Singapore National Registration Identity Card.

Singapore passport number

A Singaporean passport number.


Rule name


Spain CIF or Código de Identificación Fiscal

The Spanish Código de Identificación Fiscal (CIF) was the tax identification system used in Spain for legal entities until 2008. It was then replaced by the Número de Identificación Fiscal (NIF) for natural and juridical persons.

Spain DNI or Documento Nacional de Identidad

A Spain national identity number.

Spain driver's license number

A Spanish driver's license number.

Spain foreigner tax identification number

The Spanish Número de Identificación de Extranjeros (NIE) is an identification number for foreigners living or doing business in Spain. An NIE number is needed for key transactions such as opening a bank account, buying a car, or setting up a mobile phone contract.

Spain tax identification number

The Spanish Número de Identificación Fiscal (NIF) is a government identification number for Spanish citizens. An NIF number is needed for key transactions such as opening a bank account, buying a car, or setting up a mobile phone contract.

Spain passport number

A Spanish Ordinary Passport (Pasaporte Ordinario) number. There are 4 different types of passports in Spain. This detector is for the Ordinary Passport (Pasaporte Ordinario) type, which is issued for ordinary travel, such as vacations and business trips.

Spain social security number

The Spanish Social Security number (Número de Afiliación a la Seguridad Social) is a 10-digit sequence that identifies a person in Spain for all interactions with the country's Social Security system.


Rule name


Sweden personal identity number

A Swedish Personal Identity Number (personnummer), a national government identification number for Swedish citizens.

Sweden passport number

A Swedish passport number.


Rule name


Taiwan passport number

A Taiwanese passport number.


Rule name


Thai national identification card number

The Thai บัตรประจำตัวประชาชนไทย, or identity card, is used as the main identity document for Thai nationals.


Rule name


Turkish identification number

A unique Turkish personal identification number, assigned to every citizen of Turkey.

United Kingdom

Rule name


Scotland community health index number

The Scotland Community Health Index Number (CHI number) is a 10-digit sequence used to uniquely identify a patient within National Health Service Scotland (NHS Scotland).

United Kingdom drivers license number

A driver's license number for the United Kingdom of Great Britain and Northern Ireland (UK).

United Kingdom national health service number

A National Health Service (NHS) number is the unique number allocated to a registered user of the three public health services in England, Wales, and the Isle of Man.

United Kingdom national insurance number

The National Insurance number (NINO) is a number used in the United Kingdom (UK) in the administration of the National Insurance or social security system. It identifies people, and is also used for some purposes in the UK tax system. The number is sometimes referred to as NI No or NINO.

United Kingdom passport number

A United Kingdom (UK) passport number.

United Kingdom taxpayer reference number

A United Kingdom (UK) Unique Taxpayer Reference (UTR) number. This number, comprised of a string of 10 decimal digits, is an identifier used by the UK government to manage the taxation system. Unlike other identifiers, such as the passport number or social insurance number, the UTR is not listed on official identity cards.

United States

Rule name


American Bankers CUSIP Id

An American Bankers' Committee on Uniform Security Identification Procedures (CUSIP) number is a 9-character alphanumeric code that identifies a North American financial security.

Medical drug names

The US National Drug Code (NDC) is a unique identifier for drug products, mandated in the United States by the Food and Drug Administration (FDA).

USA Adoption Taxpayer Identification Number

A United States Adoption Taxpayer Identification Number (ATIN) is a type of United States Tax Identification Number (TIN). An ATIN is issued by the Internal Revenue Service (IRS) to individuals who are in the process of legally adopting a US citizen or resident child.

USA bank routing number

The American Bankers Association (ABA) Routing Number (also called the transit number) is a nine-digit code. It's used to identify the financial institution that's responsible to credit or entitled to receive credit for a check or electronic transaction.

USA Current Procedural Terminology

Current Procedural Terminology (CPT) detects codes, descriptions, and guidelines intended to describe procedures and services performed by physicians and other health care providers. Matches five-digit CPT codes combined with medical key words detections (i.e. 'procedural').

US DEA number

A US Drug Enforcement Administration (DEA) number is assigned to a health care provider by the US DEA. It allows the health care provider to write prescriptions for controlled substances. The DEA number is often used as a general "prescriber number" that is a unique identifier for anyone who can prescribe medication.

USA drivers license number

A driver's license number for the United States. Format can vary depending on the issuing state.

Employer Identification Number

A United States Employer Identification Number (EIN) is also known as a Federal Tax Identification Number, and is used to identify a business entity.

USA healthcare national provider identifier

The US National Provider Identifier (NPI) is a unique 10-digit identification number issued to health care providers in the United States by the Centers for Medicare and Medicaid Services (CMS). The NPI has replaced the unique provider identification number (UPIN) as the required identifier for Medicare services. It's also used by other payers, including commercial healthcare insurers.

USA Individual Taxpayer Identification Number

A United States Individual Taxpayer Identification Number (ITIN) is a type of Tax Identification Number (TIN), issued by the Internal Revenue Service (IRS). An ITIN is a tax processing number only available for certain nonresident and resident aliens, their spouses, and dependents who cannot get a Social Security Number (SSN).

USA Medical Record Number

A Medical Record Number (MRN) matches the default format XXX-X-XXXXX, with or without dashes, in close proximity to medical terms (such as MRN, medical, record).

USA Medical Record Number - Open Format

Matches a Medical Record Number (MRN, see above) patterns in a less rigid formatting, in a close proximity to medical terms (such as MRN, medical, record).
Note: this detection rule matches more patterns, thus presents increased probability for false detections. Recommended to be used combined with additional rules for detection.

USA passport number

A United States passport number.

USA Preparer Taxpayer Identification Number

A United States Preparer Taxpayer Identification Number (PTIN) is an identification number that all paid tax return preparers must use on US federal tax returns or claims for refund submitted to the US Internal Revenue Service (IRS).

US Social Security Number

A United States Social Security number (SSN) is a 9-digit number issued to US citizens, permanent residents, and temporary residents. This detector will not match against numbers with all zeroes in any digit group (that is, 000-##-####, ###-00-####, or ###-##-0000), against numbers with 666 in the first digit group, or against numbers whose first digit is 9.

USA state name

A United States state name.

USA toll free phone number

A US toll-free telephone number.

USA vehicle identification number

A vehicle identification number (VIN) is a unique 17-digit code assigned to every on-road motor vehicle in North America.


Rule name


Uruguay identity card number

A Uruguayan Cédula de Identidad (CDI), or identity card, is used as the main identity document for citizens.


Rule name


Venezuela identity card number

A Venezuelan Cédula de Identidad (CDI), or national identity card, is used as the main identity document for citizens.