Datadog Sensitive Data Scanner
ID datadogsds
pii
Datadog service that finds and redacts sensitive data in logs, traces, RUM events and cloud storage. Its Scanning Rule Library holds predefined rules, each a regular expression with recommended keywords and, where one exists, a check-digit validation. The rules are grouped into secrets and credentials, payment card and banking information, personal identifiable information (mostly national identifiers of EU countries, the US, Brazil and Asia-Pacific) and network and device information. The library had about 500 rules in November 2026, most of them for service tokens.
- Website
- https://docs.datadoghq.com/security/sensitive_data_scanner/scanning_rules/library_rules/
- Supported types
- 174
Supported semantic types
| ID | Name | Categories | Countries | Description |
|---|---|---|---|---|
| aadhaar | Indian Aadhaar number by known name PII | pii, persons | IN | Indian Aadhaar number by known name identifier |
| aba | US ABA routing number draft | finances | global | Datatype for 'US ABA routing number' (aba) from rules in context 'finances'. |
| abaroutingnum | American Banking Association (ABA) routing number | finances | US | In the United States, an ABA routing transit number (ABA RTN) is a nine-digit code printed on the bottom of checks to identify the... |
| age_secret_key | age secret key (X25519 identity) draft | secrets, cryptography | global | Secret key (identity) of the age file encryption format and tool, which decrypts files encrypted to the matching age1... public key. It... |
| airtable_personal_access_token | Airtable personal access token draft | secrets | global | Personal access token of the Airtable Web API, which replaced the deprecated API keys in February 2024. Airtable does not publish the... |
| anthropic_api_key | Anthropic API key draft | secrets | global | Secret key of the Anthropic (Claude) API, sent in the x-api-key header. Standard keys start with sk-ant-api03- and Admin API keys, which... |
| at_vnr | Austrian social insurance number (VNR) PII draft | pii, persons | AT | Versicherungsnummer (also SVNR or VSNR), the personal number of the Austrian social insurance. It has ten digits: a 3-digit serial... |
| atlassian_api_token | Atlassian API token draft | secrets | global | API token of an Atlassian account (Jira, Confluence and other Atlassian cloud products). Current tokens start with ATATT3; secret... |
| aumedicarenum | Australian medicare number PII | pii, persons | AU | Medicare number is a unique identifier issued by Australian Government that enables the cardholder to receive a rebates of medical... |
| autfn | Australian Tax File Number (TFN) PII | pii, persons | AU | The tax file number (TFN) is a unique identifier issued by the Australian Taxation Office to each taxpaying entity — an individual,... |
| aws_access_key_id | AWS access key ID draft | secrets | global | Public half of an Amazon Web Services access key pair, sent with every signed API request together with the secret access key. It has 20... |
| aws_secret_access_key | AWS secret access key draft | secrets | global | Secret part of an Amazon Web Services access key pair, used with the access key ID to sign API requests (for example to Amazon S3): 40... |
| azure_ai_services_key | Azure AI services key (Azure OpenAI, Cognitive Services) draft | secrets | global | Key of an Azure AI services resource, including Azure OpenAI and the former Cognitive Services, sent in the api-key or... |
| azure_cache_redis_key | Azure Cache for Redis access key draft | secrets | global | Access key of Azure Cache for Redis, used as the password in Redis connection strings. Keys in the identifiable format are 44 Base64... |
| azure_cosmosdb_key | Azure Cosmos DB account key draft | secrets | global | Account key of Azure Cosmos DB, the AccountKey of a Cosmos DB connection string, which grants administrative access to the account. It... |
| azure_devops_pat | Azure DevOps personal access token draft | secrets | global | Personal access token of Azure DevOps, used instead of a password for Git, the REST API and package feeds. Tokens in the current format... |
| azure_entra_client_secret | Microsoft Entra ID client secret draft | secrets | global | Client secret of a Microsoft Entra ID (Azure AD) application registration, used by a service principal to obtain tokens. Microsoft... |
| azure_function_key | Azure Functions key draft | secrets | global | Function, host or master key of Azure Functions, sent as the code query parameter or the x-functions-key header to call an... |
| azure_storage_account_key | Azure Storage account key draft | secrets | global | Access key of an Azure Storage account: 512 bits encoded in Base64, which gives 86 characters followed by two equals signs. |
| bankcard | Bank card (credit/debit card) PII | pii, finances | global | A bank card is typically a plastic card issued by a bank to its clients that performs one or more of a number of services that relate to... |
| bankcard_amex | American Express card number PII pattern draft | pii, finances | global | Primary account number of an American Express card: 15 digits that start with 34 or 37, the last of them a Luhn check digit. The pattern... |
| bankcard_diners | Diners Club card number PII pattern draft | pii, finances | global | Primary account number of a Diners Club International card: 14 to 19 digits that start with 30, 36, 38 or 39, the last of them a Luhn... |
| bankcard_discover | Discover card number PII pattern draft | pii, finances | global | Primary account number of a Discover card: 16 to 19 digits that start with 6011, 644 to 649 or 65, or with 622126 to 622925 for cards... |
| bankcard_jcb | JCB card number PII pattern draft | pii, finances | global | Primary account number of a JCB card: 16 to 19 digits that start with 3528 to 3589, the last of them a Luhn check digit. The pattern... |
| bankcard_maestro | Maestro card number PII pattern draft | pii, finances | global | Primary account number of a Maestro debit card: 12 to 19 digits that start with 5018, 5020, 5038, 5893, 6304, 6759, 6761, 6762 or 6763,... |
| bankcard_mastercard | Mastercard card number PII pattern draft | pii, finances | global | Primary account number of a Mastercard card: 16 digits that start with 51 to 55 or, since 2017, with 2221 to 2720. The last digit is a... |
| bankcard_visa | Visa card number PII pattern draft | pii, finances | global | Primary account number of a Visa card. Visa numbers start with 4 and have 13, 16 or 19 digits; the last digit is a Luhn check digit. The... |
| benatcardid | Belgian national register number (Rijksregisternummer) PII | pii, persons | BE | Rijksregisternummer (numéro de registre national, Nationalregisternummer), the 11-digit number of a person in the Belgian National... |
| bg_egn | Bulgarian unified civil number (EGN) PII draft | pii, persons | BG | Единен граждански номер, the 10-digit personal number of Bulgarian citizens. The first six digits encode the date of birth (the month is... |
| brcpf | CPF number (Cadastro de Pessoas Fisicas) PII | pii, persons | BR | The CPF number (Cadastro de Pessoas Fisicas; Portuguese for Natural Persons Register) is the Brazilian individual taxpayer registry,... |
| bsn | Dutch citizen service number (BSN) PII | pii, persons, finances | NL | Burgerservicenummer (BSN), the personal number of everyone registered in the Dutch population register (BRP). It replaced the sofinummer... |
| casin | Canada social insurance number (SIN) PII | pii, persons | CA | Social insurance number (SIN) is a number issued in Canada to administer various government programs. |
| clojars_deploy_token | Clojars deploy token draft | secrets | global | Token with which a build tool deploys artifacts to the Clojars repository instead of a password. Deploy tokens start with CLOJARS_, as... |
| cloudflare_api_token | Cloudflare API token draft | secrets | global | Scoped API token of Cloudflare. Tokens created or rolled in the scannable format start with cfut_ (user API token) or cfat_ (account API... |
| cloudflare_global_api_key | Cloudflare Global API Key draft | secrets | global | Global API Key of a Cloudflare user account, which grants full access to the account. Keys in the scannable format start with cfk_,... |
| cloudflare_origin_ca_key | Cloudflare Origin CA key draft | secrets | global | Key for the Cloudflare Origin CA certificates API, often sent in the X-Auth-User-Service-Key header and also used by the Keyless SSL key... |
| cn_passport | Chinese ordinary passport number PII pattern draft | pii, persons | CN | Number of an ordinary passport issued by the National Immigration Administration of the People's Republic of China: nine characters.... |
| cn_vehicle_plate | Chinese civil vehicle registration plate draft | transport | CN | Registration number on the plate of a civil vehicle in mainland China under the standard GA 36-2018: the one-character abbreviation of... |
| cnpj | Brazilian CNPJ (Cadastro Nacional de Pessoa Jurídica) by known name | finances | BR | Brazilian CNPJ (Cadastro Nacional de Pessoa Jurídica) by known name identifier |
| connection_string | Connection string with credentials draft | secrets | global | Connection string of a database or a cloud service that includes a password or an access key, for example Server=...;User... |
| cpf | Brazilian CPF (Cadastro de Pessoa Física) by known name PII | finances | BR | Brazilian CPF (Cadastro de Pessoa Física) by known name identifier |
| cy_id_card | Cypriot identity card number PII draft | pii, persons | CY | Number of the Cypriot identity card. Microsoft Purview looks for ten digits. |
| cy_tin | Cypriot tax identification number PII draft | pii, finances | CY | Cypriot tax identification number: eight digits that start with 0 or 9, followed by a letter. |
| cz_rc | Czech birth number (rodné číslo) PII draft | pii, persons | CZ | Rodné číslo, the Czech personal number; Slovakia uses the same scheme. The first six digits are the date of birth as YYMMDD. Women have... |
| databricks_access_token | Databricks personal access token draft | secrets | global | Personal access token of Databricks, used to authenticate to a Databricks workspace. It starts with dapi followed by 32 hexadecimal... |
| de_rvnr | German pension insurance number (Rentenversicherungsnummer) PII draft | pii, persons | DE | Versicherungsnummer of the German statutory pension insurance (§ 147 SGB VI), also called social insurance number... |
| dedriverlic | Germany driver license number PII | pii, persons | DE | Number (Führerscheinnummer) of a German card driving licence: eleven characters. The first four are the key of the issuing authority (a... |
| depersonalausweis | German identity card number (Personalausweis) PII | pii, persons | DE | Serial number (Ausweisnummer) of a German identity card (Personalausweis). Cards issued since 1 November 2010 have nine characters: a... |
| digitalocean_token | DigitalOcean API token draft | secrets | global | API token of DigitalOcean. The prefix tells the token type: dop_v1_ for a personal access token, doo_v1_ for an OAuth access token and... |
| discord_bot_token | Discord bot token draft | secrets | global | Token that authenticates a Discord bot to the Discord API, sent in the header Authorization: Bot <token>. It has three Base64url parts... |
| doppler_token | Doppler token draft | secrets | global | Access token of the Doppler secrets manager. Doppler documents one format per token type, each starting with dp. and a type code: dp.pt.... |
| dropbox_short_lived_token | Dropbox short-lived access token draft | secrets | global | Short-lived OAuth access token of the Dropbox API. Dropbox staff state that these tokens start with sl., while the deprecated long-lived... |
| dynatrace_token | Dynatrace token draft | secrets | global | Access token of Dynatrace in the format used since Dynatrace version 1.210: a prefix that names the token type (dt0 followed by a letter... |
| ee_ik | Estonian personal identification code (isikukood) PII draft | pii, persons | EE | Isikukood, the 11-digit personal code in Estonia. The first digit gives the sex and the century of birth, the next six the date of birth... |
| Email address PII | common, internet, pii | global | Address of an electronic mailbox in the form local-part@domain, defined in section 3.4.1 of RFC 5322. The local part names the mailbox,... | |
| es_dni | Spanish national identity document number (DNI) PII draft | pii, persons | ES | Documento Nacional de Identidad, the identity number of Spanish citizens: eight digits and a check letter, which is the number modulo 23... |
| es_nss | Spanish social security number PII draft | pii, persons | ES | Spanish social security affiliation number (número de la Seguridad Social): a two-digit province code, seven or eight digits and two... |
| ethereum_address | Ethereum address | cryptocurrency | global | Address of an Ethereum account or contract: 0x followed by 40 hexadecimal digits, the last 20 bytes of the Keccak-256 hash of the public... |
| facebook_access_token | Meta (Facebook) Graph API access token draft | secrets | global | User, page or system user access token of the Meta (Facebook) Graph API. These tokens start with EAA followed by a long string of... |
| fi_hetu | Finnish personal identity code (HETU) PII draft | pii, persons | FI | Henkilötunnus, the personal identity code of people registered in Finland. It is the date of birth (DDMMYY), a century sign (+ for the... |
| flutterwave_secret_key | Flutterwave secret key draft | secrets | global | Secret API key of the Flutterwave payments API. Flutterwave documents that secret keys start with FLWSECK and that test keys add _TEST... |
| fr_nif | French tax identification number (numéro fiscal) PII draft | finances, pii | FR | Numéro fiscal de référence, also called NIF or SPI number, the 13-digit number that the French tax administration gives to each person... |
| frnir | French social security number (NIR) PII | pii, persons | FR | French national identification number (numéro d'inscription au répertoire, NIR), known as the social security number. INSEE assigns it... |
| github_fine_grained_pat | GitHub fine-grained personal access token draft | secrets | global | Fine-grained personal access token of GitHub, limited to selected repositories and permissions: github_pat_ followed by 82 letters,... |
| github_token | GitHub token draft | secrets | global | Token issued by GitHub, such as a personal access token. It starts with a prefix that names the token type (ghp_, gho_, ghu_, ghs_ or... |
| gitlab_agent_token | GitLab agent for Kubernetes token draft | secrets | global | Token with which the GitLab agent for Kubernetes, running in a cluster, authenticates to GitLab. GitLab gives these tokens the prefix... |
| gitlab_deploy_token | GitLab deploy token draft | secrets | global | Token that gives read or write access to the repositories, container registry or package registry of one GitLab project or group,... |
| gitlab_feature_flags_client_token | GitLab feature flags client token draft | secrets | global | Token with which applications fetch the feature flags of a GitLab project through its Unleash-compatible API. GitLab gives these tokens... |
| gitlab_feed_token | GitLab feed token draft | secrets | global | Token in the URLs of GitLab RSS and Atom feeds and calendar feeds; it gives read access to the activity of the user. GitLab gives these... |
| gitlab_incoming_mail_token | GitLab incoming mail token draft | secrets | global | Token in the email address to which a user sends mail to create issues or merge requests in a GitLab project. GitLab gives these tokens... |
| gitlab_oauth_app_secret | GitLab OAuth application secret draft | secrets | global | Client secret of an OAuth application registered in GitLab. GitLab gives these tokens the prefix gloas-, which cannot be configured.... |
| gitlab_pat | GitLab personal access token draft | secrets | global | Personal access token of GitLab, which authenticates a user to the GitLab API and to Git over HTTPS. GitLab gives these tokens the... |
| gitlab_runner_token | GitLab runner authentication token draft | secrets | global | Token with which a GitLab Runner authenticates to a GitLab instance to pick up CI/CD jobs. GitLab gives these tokens the prefix glrt-... |
| gitlab_scim_token | GitLab SCIM token draft | secrets | global | Token with which an identity provider provisions and deprovisions GitLab users and group members through the SCIM API. GitLab gives... |
| gitlab_session_cookie | GitLab session cookie draft | secrets | global | Session cookie of the GitLab web interface, written as _gitlab_session=<value>. Whoever has the cookie is signed in as the user until... |
| gitlab_trigger_token | GitLab pipeline trigger token draft | secrets | global | Token that starts a CI/CD pipeline of a GitLab project through the pipeline triggers API. GitLab gives these tokens the prefix glptt-,... |
| google_api_key | Google API key draft | secrets | global | API key for Google Cloud and Google Maps APIs: the prefix AIza followed by 35 letters, digits, hyphens or underscores. |
| gr_amka | Greek social security number (AMKA) PII draft | pii, persons | GR | Αριθμός Μητρώου Κοινωνικής Ασφάλισης, the 11-digit social security registration number in Greece. It begins with the date of birth... |
| gr_vat | Greek tax number (AFM) PII draft | finances | GR | Αριθμός Φορολογικού Μητρώου (ΑΦΜ), the 9-digit tax registration number of individuals and businesses in Greece. With the EL prefix it is... |
| grafana_cloud_token | Grafana Cloud access policy token draft | secrets | global | Token of a Grafana Cloud access policy, used by agents and API clients to send and query telemetry. Grafana documents that these tokens... |
| grafana_service_account_token | Grafana service account token draft | secrets | global | Token of a Grafana service account, sent as a bearer token to the Grafana HTTP API: glsa_ followed by 32 letters and digits, an... |
| hashicorp_vault_token | HashiCorp Vault token draft | secrets | global | Token that authenticates a client to HashiCorp Vault. Since Vault 1.10 the prefix names the token type - hvs. for service tokens, hvb.... |
| hr_oib | Croatian personal identification number (OIB) PII draft | finances, pii | HR | Osobni identifikacijski broj, the 11-digit identification number of persons and legal entities in Croatia. It holds no personal... |
| http_authorization_header | HTTP Authorization header value draft | secrets | global | Value of the HTTP Authorization request header: an authentication scheme such as Basic, Bearer, Digest or Negotiate followed by the credentials. |
| http_cookie | HTTP Cookie header value draft | internet, secrets | global | Value of the HTTP Cookie request header: one or more cookie-name=cookie-value pairs separated by a semicolon and a space, as RFC 6265... |
| hu_personal_id | Hungarian personal identification number PII draft | pii, persons | HU | Hungarian personal identification number (személyi azonosító): 11 digits made of a sex and century digit, the date of birth (YYMMDD), a... |
| hu_taj | Hungarian social security number (TAJ) PII draft | pii, persons | HU | Hungarian social security number (TAJ szám) used in health insurance: nine digits, the last of which is a check digit. |
| hu_tin | Hungarian tax identification number PII draft | pii, persons | HU | Tax identification number of a Hungarian private person (adóazonosító jel): ten digits that start with 8 and end with a check digit. |
| huggingface_access_token | Hugging Face access token draft | secrets | global | User access token of the Hugging Face Hub, used in place of a password for git, as a bearer token for Inference Providers and in the... |
| iban | International Bank Account Number | finances | global | The International Bank Account Number (IBAN) is an internationally agreed system of identifying bank accounts across national borders to... |
| idcard | Chinese ID card (身份证) by known name PII | pii, persons | CN | Citizen identification number of the People's Republic of China, printed on the Resident Identity Card (居民身份证). Since 1999 it has 18... |
| ie_pps | Irish Personal Public Service number (PPS) PII draft | pii, persons | IE | Personal Public Service Number, the identifier for social welfare, public services and tax in Ireland. It has seven digits and a check... |
| ipv4 | IPv4 address PII | internet, pii | global | 32-bit address of Internet Protocol version 4 (RFC 791), written in dotted-decimal notation as four numbers from 0 to 255, such as... |
| ipv6 | IPv6 address PII | internet, pii | global | 128-bit address of Internet Protocol version 6, written as eight groups of up to four hexadecimal digits separated by colons (RFC 4291,... |
| jfrog_reference_token | JFrog reference token draft | secrets | global | Short token of the JFrog Platform (Artifactory) that refers to a full JWT access token. It has 64 characters: the prefix cmVmd followed... |
| jwt | JSON Web Token (JWT) draft | secrets | global | Compact JSON Web Token (RFC 7519) signed with JWS: three Base64url parts (header, claims and signature) separated by dots. The header... |
| krrrn | Korean RRN by field name PII | pii, persons | KR | Korean RRN by field name identifier |
| linear_api_key | Linear API key draft | secrets | global | Personal API key of Linear, the issue tracking service: lin_api_ followed by 40 letters and digits. |
| lt_asmens | Lithuanian personal code (asmens kodas) PII draft | pii, persons | LT | Asmens kodas, the 11-digit personal code in Lithuania. The first digit gives the sex and the century of birth, the next six the date of... |
| lu_matricule | Luxembourg national identification number PII draft | pii, persons | LU | National identification number (matricule) of a natural person in Luxembourg: 13 digits, of which the last two are check digits. |
| lv_personal_code | Latvian personal code PII draft | pii, persons | LV | Latvian personal code (personas kods), 11 digits. Codes issued before July 2017 start with the date of birth (DDMMYY), followed by a... |
| mac_address | MAC address (Media Access Control) PII | internet, identifiers, pii | global | 48-bit hardware address (EUI-48) of a network interface in Ethernet, Wi-Fi, Bluetooth and other IEEE 802 networks, used to deliver... |
| mailchimp_api_key | Mailchimp API key draft | secrets | global | API key of the Mailchimp Marketing API: 32 hexadecimal digits, a hyphen and the data center of the account (for example us6), which is... |
| mailgun_api_key | Mailgun API key draft | secrets | global | Private API key of Mailgun, the password of HTTP Basic authentication with the user name api. The regexp covers the older form key-... |
| mapbox_access_token | Mapbox access token draft | secrets | global | Access token of the Mapbox APIs. Mapbox documents three kinds by prefix: public tokens (pk), meant to be embedded in client... |
| medicare | Australian Medicare number by known name PII draft | pii, persons | AU | Australian Medicare number by known name identifier |
| monero_address | Monero address draft | cryptocurrency | global | Mainnet address of Monero: the network byte, the public spend key, the public view key and a 4-byte Keccak-256 checksum, encoded with... |
| mt_id_card | Maltese identity card number PII draft | pii, persons | MT | Number of the Maltese identity card: seven digits followed by one of the letters M, G, A, P, L, H, B or Z. |
| new_relic_license_key | New Relic license key draft | secrets | global | Ingest license key of a New Relic account, used by agents to report data. New Relic documents it as a 40-character key that ends in... |
| new_relic_user_api_key | New Relic user key draft | secrets | global | User key of New Relic, a personal API key that NerdGraph, New Relic's GraphQL API, requires for querying data and changing... |
| notion_integration_token | Notion integration token draft | secrets | global | API token of a Notion integration. Tokens generated since 25 September 2024 start with ntn_; older tokens start with secret_ and keep... |
| npm_access_token | npm access token draft | secrets | global | Access token of the npm package registry in the format introduced in 2021: the prefix npm_ followed by 36 letters and digits, the last... |
| nric | Singapore NRIC (National Registration Identity Card) by known name PII | finances | SG | Singapore NRIC (National Registration Identity Card) by known name identifier |
| onepassword_service_account_token | 1Password service account token draft | secrets | global | Token of a 1Password service account. 1Password gives it the prefix ops_ so that code analyzers can find it; the rest is a... |
| openai_api_key | OpenAI API key draft | secrets | global | Secret key of the OpenAI API. Keys start with sk-; project, service account and admin keys start with sk-proj-, sk-svcacct- or... |
| openrouter_api_key | OpenRouter API key draft | secrets | global | API key of OpenRouter. The OpenRouter API reference shows key labels that start with sk-or-v1-; the format is not described in prose.... |
| p2pkhaddr | Bitcoin P2PKH address | cryptocurrency | global | Legacy Bitcoin address of the pay-to-public-key-hash (P2PKH) type. It is the Base58Check encoding of the version byte 0 and the 20-byte... |
| passport | Person passport number (universal) PII draft | pii, persons | global | Person passport, usually unique personal information that should be shared online. Identifies personal document issued to person by... |
| person_fullname | Person fullname PII draft | persons, pii | global | Full name of the person as combination of last, first, and sometimes middle name |
| pgp_private_key_block | OpenPGP private key block draft | secrets, cryptography | global | OpenPGP secret key in ASCII armor: Radix-64 text between the lines -----BEGIN PGP PRIVATE KEY BLOCK----- and -----END PGP PRIVATE KEY... |
| phone | Phone number PII | pii, common, telecom | global | Telephone number in standard format (RFC3966), without 'tel:' prefix |
| planetscale_token | PlanetScale API token draft | secrets | global | Token for the PlanetScale API and CLI: a service token starts with pscale_tkn_ and an OAuth token with pscale_oauth_. Secret scanners... |
| plnip | Polish tax identification number (NIP) PII draft | finances | PL | Numer identyfikacji podatkowej, the 10-digit tax identification number in Poland. Businesses, including sole traders, use it in tax... |
| plpesel | Polish PESEL by field name PII | pii, persons | PL | Polish PESEL by field name identifier |
| posthog_personal_api_key | PostHog personal API key draft | secrets | global | Personal API key of PostHog, which gives access to the private API endpoints of a user's projects. PostHog documents the prefix phx_.... |
| postman_api_key | Postman API key draft | secrets | global | API key of the Postman API, sent in the X-API-Key header: PMAK- followed by 24 hexadecimal digits, a hyphen and 34 more hexadecimal digits. |
| prefect_api_key | Prefect Cloud API key draft | secrets | global | API key of Prefect Cloud, used by workers and the Prefect client. Prefect does not publish the format; the regexp follows the gitleaks... |
| pt_nif | Portuguese tax identification number (NIF) PII draft | finances, pii | PT | Número de identificação fiscal, the 9-digit tax number of individuals and legal persons in Portugal (for legal persons also called... |
| pulumi_access_token | Pulumi access token draft | secrets | global | Access token of Pulumi Cloud (a personal, organization or team token): pul- followed by 40 hexadecimal digits. |
| pypi_token | PyPI API token draft | secrets | global | API token of the Python Package Index, used to upload packages. It is a serialized macaroon with the prefix pypi-; PyPI documents that... |
| replicate_api_token | Replicate API token draft | secrets | global | API token of Replicate. Replicate documents that tokens are 40-character strings that always start with r8_; the regexp accepts letters... |
| ro_cnp | Romanian personal numerical code (CNP) PII draft | pii, persons | RO | Cod numeric personal, the 13-digit personal identifier in Romania. It encodes the sex and century of birth, the date of birth (YYMMDD),... |
| rubygems_api_key | RubyGems API key draft | secrets | global | API key of RubyGems.org, used by the gem CLI to push and manage gems, for example through the GEM_HOST_API_KEY environment variable:... |
| se_samordningsnummer | Swedish coordination number (samordningsnummer) PII draft | pii, persons | SE | Identity number that the Swedish Tax Agency (Skatteverket) assigns to people who are not or have not been registered as residents in... |
| sendgrid_api_key | SendGrid API key draft | secrets | global | API key of Twilio SendGrid, also used as the SMTP password. Keys are always 69 characters long and start with SG. followed by letters,... |
| sendinblue_api_key | Sendinblue API key draft | secrets | global | API key of the Sendinblue email marketing service: xkeysib- followed by 64 hexadecimal digits, a hyphen and 16 letters and digits. |
| sentry_auth_token | Sentry auth token draft | secrets | global | Auth token of Sentry, the error monitoring service. Personal (user) tokens are sntryu_ followed by 64 hexadecimal digits. Organization... |
| sepersonnummer | Sweden personal identity number (personnummer) PII | pii, persons | SE | The personal identity number (Swedish: personnummer) is the Swedish national identification number. It has ten digits, the date of birth... |
| sgnric | The Singapore National Registration Identity Card (NRIC) PII | pii, persons | SG | The National Registration Identity Card (NRIC) is the compulsory identity document issued to citizens and permanent residents of Singapore. |
| shared_access_signature | Azure shared access signature (SAS) draft | secrets | global | Shared access signature of Azure services (Storage, Service Bus, Logic Apps): a URL query string with permissions, an expiry time and a... |
| shippo_api_token | Shippo API token draft | secrets | global | API token of the Shippo shipping API. Shippo documents that live tokens start with shippo_live_ and test tokens with shippo_test_; the... |
| shopify_access_token | Shopify access token draft | secrets | global | Access token of a Shopify app. The prefix tells the kind of token: shpat_ for an app access token, shpca_ for a custom app and shppa_... |
| si_emso | Slovenian unique master citizen number (EMŠO) PII draft | pii, persons | SI | Slovenian unique master citizen number (EMŠO): 13 digits made of the date of birth (DDMMYYY), a register code, a serial number and a check digit. |
| si_tin | Slovenian tax number PII draft | pii, persons | SI | Slovenian tax number (davčna številka): eight digits; the first is not zero and the last is a check digit. |
| slack_token | Slack token draft | secrets | global | Access token of the Slack API. The prefix names the token type, for example xoxb- for bot tokens and xoxp- for user tokens. |
| sonarqube_token | SonarQube token draft | secrets | global | Token of SonarQube Server used to run an analysis or call the web API instead of a login and password. Current tokens start with one of... |
| square_access_token | Square access token draft | secrets | global | Personal or OAuth access token of the Square APIs. Square does not document the format; secret scanners such as gitleaks recognize it by... |
| square_oauth_secret | Square OAuth application secret draft | secrets | global | Application secret of a Square developer application, which the application uses to exchange OAuth authorization codes for access... |
| steuerid | German tax identification number (Steuer-ID, IdNr.) PII | finances, pii | DE | Steuerliche Identifikationsnummer (IdNr., Steuer-ID), the personal tax number that the Federal Central Tax Office (BZSt) assigns once to... |
| stripe_api_key | Stripe secret or restricted API key draft | secrets | global | Server-side API key of Stripe. Secret keys start with sk_ and restricted keys with rk_, followed by test_ for a sandbox or live_ for... |
| stripe_webhook_secret | Stripe webhook signing secret draft | secrets | global | Secret with which a Stripe webhook endpoint verifies the signatures of the events it receives. Stripe documents that it starts with... |
| supabase_personal_access_token | Supabase personal access token draft | secrets | global | Personal access token of the Supabase Management API and CLI. Supabase shows these tokens with the prefix sbp_ and documents that tokens... |
| supabase_secret_key | Supabase secret key draft | secrets | global | Secret API key of a Supabase project, which bypasses row level security and must stay on the server. Supabase documents that secret keys... |
| telegram_bot_token | Telegram bot token draft | secrets | global | Token that authorizes a bot in the Telegram Bot API: the numeric bot ID, a colon and a secret that starts with A. Telegram documents the... |
| terraform_cloud_api_token | HashiCorp Terraform Cloud API token draft | secrets | global | User or organization API token of HashiCorp Terraform Cloud: 14 letters and digits, the marker .atlasv1. and 60 to 70 more letters,... |
| tfn | Australian TFN (Tax File Number) by known name PII | finances | AU | Australian TFN (Tax File Number) by known name identifier |
| twilio_account_sid | Twilio Account SID draft | secrets | global | String identifier (SID) of a Twilio account: AC followed by 32 hexadecimal digits. It is the user name of Twilio API requests and is... |
| twilio_api_key_sid | Twilio API key SID draft | secrets | global | String identifier (SID) of a Twilio API key: SK followed by 32 hexadecimal digits. The SID is used together with the API key secret as... |
| twitter_bearer_token | X (Twitter) API bearer token draft | secrets | global | App-only bearer token of the X (Twitter) API. X describes the token as a byte array of unspecified format; the regexp follows the... |
| typeform_personal_access_token | Typeform personal access token draft | secrets | global | Personal access token of the Typeform API. The Typeform documentation shows a sample token that starts with tfp_ followed by 40... |
| uknhsnum | UK NHS Number PII | pii, persons, medical | GB | NHS numbers are the unique numbers allocated to registered users of the three public health services in England, Wales and the Isle of... |
| uknino | UK National Insurance number PII | pii, persons | GB | The National Insurance number is a number used in the United Kingdom in the administration of the National Insurance or social security... |
| url | Uniform Resource Locator (URL) | common, internet | global | Address of a resource on a network that also says how to retrieve it: a scheme such as https, a host, an optional port, a path, a query... |
| usdeanumber | USA DEA Registration (cerficicate) Number PII | pii, persons, medical | US | A DEA number (DEA Registration Number) is an identifier assigned to a health care provider (such as a physician, physician assistant,... |
| usdriverlic | US driver license number PII | pii, persons | US | Alphanumeric value of the United States driver license |
| usnpi | US National Provider Identifier (NPI) PII | pii, persons | US | A National Provider Identifier (NPI) is a unique 10-digit identification number issued to health care providers in the United States by... |
| uspassport | US passport number PII pattern draft | pii, persons | US | Number of US Passport |
| usssn | US Social Security Number PII | pii, persons | US | In the United States, a Social Security number (SSN) is a nine-digit number issued to U.S. citizens, permanent residents, and temporary... |
| vercel_token | Vercel access token draft | secrets | global | Access token or API key of Vercel. Vercel documents a prefix for each credential type: vcp_ for personal access tokens, vci_ for... |
| vin | Vehicle Identification Number by field name draft | transport | global | Vehicle Identification Number by field name number |
| x509_private_key | X.509 certificate private key draft | secrets, cryptography | global | Private key of an X.509 certificate, usually written as a PEM block that starts with -----BEGIN PRIVATE KEY----- (or RSA PRIVATE KEY, EC... |
| yandex_cloud_api_key | Yandex Cloud API key draft | secrets | global | API key of a Yandex Cloud service account. Yandex does not publish the format; the masked key in the Yandex Cloud documentation and the... |
| yandex_cloud_iam_token | Yandex Cloud IAM token draft | secrets | global | Short-lived IAM token of Yandex Cloud, sent in the Authorization: Bearer header. The regexp is the one that the Yandex Cloud... |
| yandex_oauth_token | Yandex OAuth token draft | secrets | global | OAuth token of a Yandex account (Yandex ID), which Yandex Cloud also accepts to obtain IAM tokens. Yandex documents that the token... |
Use this record
- JSON: API v1 · legacy shape
- Improve it: edit
data/tools/pii/datadogsds.yamlon GitHub