Implementation deadlineCore obligations enforceable — 13 May 2027

Time left—

Discover · PII Scanner

Find the personal data nobody wrote down

The scanner looks through your databases and tells you which columns hold personal data, what kind it is and how sure it is. Run it once, or leave it running to catch new copies as they appear.

What it does

PII Scanner in practice

Relational and document databases

PostgreSQL, MySQL and MongoDB today, including free-text and nested fields. Cloud storage and file shares are next, on the same engine.

Built for Indian data

It finds Aadhaar, PAN, GSTIN, UPI IDs and Indian phone numbers, as well as emails, card and bank details, and passwords or keys left in data. Each match is checked, so a 10-digit order number isn't mistaken for a phone number.

Once, or all the time

A one-off scan gives you a list of your personal data in a day. Or leave it running on a schedule and it reports what has changed.

Nothing sensitive leaves your network

The scanner runs on your own network. Results show where data is and what type it is, with the values hidden. Database passwords stay in your own secrets store.

s.8(5): reasonable security safeguards

Also included

The details that matter

  • A quick scan of column names only, if you can't read the data yet.
  • A dry run first, showing what will be scanned.
  • A spreadsheet of results and a PDF summary to share.
  • Mark a wrong match once, with a reason, and it stays marked.

Questions

About PII Scanner

All questions
Does the scanner copy our data anywhere?

No. It reads a small sample where the data sits, works out what kind of data it is, and records the result with the value hidden. Only the list of findings leaves the machine, never the data.

Can we run it without connecting to the cloud service?

Yes. You can export the results as an encrypted file and upload it by hand. This suits networks with no internet access.

What if it flags something that isn't personal data?

You mark it as a wrong match and say why. The reason is kept, so the next person can see the decision.

See PII Scanner on your own systems

A 45-minute working session. Bring a notice or consent form you use today and we will check it with you.