{"object":"pii_recognizers","pack_version":"2026.07.05","updated":"2026-07-05","recognizers":[{"entity_type":"EMAIL","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.85},{"entity_type":"CREDIT_CARD","compliance_tags":["PCI","GDPR"],"languages":["any"],"has_validator":true,"base_score":0.8},{"entity_type":"IBAN","compliance_tags":["PCI","GDPR"],"languages":["any"],"has_validator":true,"base_score":0.85},{"entity_type":"US_BANK_ROUTING","compliance_tags":["PCI","GDPR"],"languages":["en"],"has_validator":true,"base_score":0.3},{"entity_type":"US_SSN","compliance_tags":["GDPR","HIPAA"],"languages":["en"],"has_validator":true,"base_score":0.3},{"entity_type":"US_ITIN","compliance_tags":["GDPR"],"languages":["en"],"has_validator":true,"base_score":0.3},{"entity_type":"US_EIN","compliance_tags":["GDPR"],"languages":["en"],"has_validator":false,"base_score":0.35},{"entity_type":"US_MEDICARE_BENEFICIARY_ID","compliance_tags":["HIPAA","GDPR"],"languages":["en"],"has_validator":false,"base_score":0.5},{"entity_type":"US_PASSPORT","compliance_tags":["GDPR"],"languages":["en"],"has_validator":false,"base_score":0.25},{"entity_type":"US_DRIVER_LICENSE","compliance_tags":["GDPR"],"languages":["en"],"has_validator":false,"base_score":0.2},{"entity_type":"PHONE","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.45},{"entity_type":"IP_V4","compliance_tags":["GDPR"],"languages":["any"],"has_validator":true,"base_score":0.55},{"entity_type":"IP_V6","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.65},{"entity_type":"MAC_ADDRESS","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.7},{"entity_type":"CRYPTO_BTC","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.6},{"entity_type":"CRYPTO_ETH","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.65},{"entity_type":"DATE_OF_BIRTH","compliance_tags":["GDPR","HIPAA"],"languages":["any"],"has_validator":false,"base_score":0.3},{"entity_type":"GEO_COORD","compliance_tags":["GDPR"],"languages":["any"],"has_validator":false,"base_score":0.5},{"entity_type":"JWT","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.85},{"entity_type":"PRIVATE_KEY","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.95},{"entity_type":"AWS_ACCESS_KEY","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.9},{"entity_type":"GITHUB_TOKEN","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.9},{"entity_type":"SLACK_TOKEN","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.9},{"entity_type":"GOOGLE_API_KEY","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.85},{"entity_type":"STRIPE_KEY","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.88},{"entity_type":"GENERIC_API_KEY","compliance_tags":["SECRET"],"languages":["any"],"has_validator":false,"base_score":0.7},{"entity_type":"PERSON","compliance_tags":["GDPR"],"languages":["en"],"has_validator":false,"base_score":0.4,"best_effort":true}],"recognizers_total":27,"compliance_map":{"GDPR":["CREDIT_CARD","CRYPTO_BTC","CRYPTO_ETH","DATE_OF_BIRTH","EMAIL","GEO_COORD","IBAN","IP_V4","IP_V6","MAC_ADDRESS","PERSON","PHONE","US_BANK_ROUTING","US_DRIVER_LICENSE","US_EIN","US_ITIN","US_MEDICARE_BENEFICIARY_ID","US_PASSPORT","US_SSN"],"HIPAA":["DATE_OF_BIRTH","US_MEDICARE_BENEFICIARY_ID","US_SSN"],"PCI":["CREDIT_CARD","IBAN","US_BANK_ROUTING"],"SECRET":["AWS_ACCESS_KEY","GENERIC_API_KEY","GITHUB_TOKEN","GOOGLE_API_KEY","JWT","PRIVATE_KEY","SLACK_TOKEN","STRIPE_KEY"]},"compliance_frameworks":["GDPR","HIPAA","PCI","SECRET"],"output_modes":["redact","mask","hash","tokenize"],"max_input_bytes":262144,"provenance":"Structured-PII patterns adapted (not copied) from Microsoft Presidio predefined recognizers (Apache-2.0) plus our own curation. No third-party code is imported or vendored; the engine is our own lightweight stdlib re + checksum matcher (no spaCy/Presidio runtime — it does not fit a 256MB VM).","disclaimer":"Detects STRUCTURED PII (emails, phones, cards, bank/tax ids, IPs, crypto addresses, secrets, etc.) via deterministic patterns + checksums. It does NOT detect all PII — free-text person / organization / location names (NER) are out of scope. These are indicators, not legal advice, and not a compliance guarantee. Always review before relying on the result.","note":"Freshness = a data update of the recognizer registry (no live daemon). The paid /pii/scan and /pii/redact routes match against this pack. Structured PII only — free-text NER is out of scope."}