Built-in Identifier Reference

Immuta comes with a set of built-in identifiers that look for common data types. These identifiers were written by Immuta's research and development team and cannot be deleted or edited by users. However, users can add these built-in identifiers to their own frameworks and edit the tags applied by them.

When using SDD with classification frameworks, it is recommended to use the default resulting tags listed in the table below for these built-in identifiers. This ensures that the framework rules apply sensitivity tags as intended.

Identifiers must match at least 90% of the sampled data to be tagged, with two exceptions noted below. See the How competitive pattern analysis works guide for more information about sampling and thresholds.

Deprecation notice

The following Discovered tags have been deprecated:

  • Discovered.Identifier Direct

  • Discovered.Identifier Indirect

  • Discovered.Identifier Undetermined

  • Discovered.PCI

  • Discovered.PHI

  • Discovered.PII

New SaaS tenants will not see these tags applied by SDD. Current tenants relying on these tags for policies should contact their Immuta representative for support before these tags are removed from the product in December 2024.

Identifier descriptions and default resulting tags

Identifier
Description
Resulting tags from the default identifier

AGE

Matches numeric strings between 10 and 199.

  • Discovered.Entity.Age

ARGENTINA_DNI_NUMBER

Matches strings consistent with Argentina National Identity (DNI) Number. Requires an eight-digit number with optional periods between the second and third and fifth and sixth digit.

  • Discovered.Country.Argentina

  • Discovered.Entity.DNI Number

AUSTRALIA_MEDICARE_NUMBER

Matches numeric strings consistent with Australian Medicare number. Requires a ten- or eleven-digit number. The starting digit must be between 2 and 6, inclusive. Optional spaces can be placed between the fourth and fifth and ninth and tenth digit. The optional 11th digit separated by a / can be present. A checksum is required.

  • Discovered.Country.Australia

  • Discovered.Entity.Medicare Number

AUSTRALIA_PASSPORT

Matches strings consistent with Australian Passport number. An 8- or 9-character string is required, with a starting upper case character (N, E, D, F, A, C, U, X) or a two-character starting character (P followed by A, B, C, D, E, F, U, W, X, or Z) followed by seven digits.

  • Discovered.Country.Australia

  • Discovered.Entity.Passport

BELGIUM_NATIONAL_ID_CARD_NUMBER

Matches numeric strings consistent with Belgium's National ID card. Requires a twelve-digit number with hyphen (-) between the third and fourth digit and tenth and eleventh digits. A two checksum is required.

  • Discovered.Country.Belgium

  • Discovered.Entity.National ID Card Number

BITCOIN_INVOICE_ADDRESS

Matches strings consistent with the following Bitcoin Invoice Address formats: P2PKH, P2SH, and Bech32. P2PKH and P2SH must start with a 1 or a 3, respectively, followed by 25 - 34 alphanumeric characters, excluding l, I, O, and 0. Bech32 formats must begin with bc1 and be followed by 39 characters. To be identified, any addresses must have a valid checksum.

  • Discovered.Entity.CRYPTO

BRAZIL_CPF_NUMBER

Matches a numeric string consistent with Brazil's CPF (Cadastro Pessoal de Pessoa Física) number. An eleven-digit numeric string with non-numeric separators after the third, sixth, and ninth digits. A two digit checksum is required.

  • Discovered.Country.Brazil

  • Discovered.Entity.CPF Number

CANADA_BC_PHN

Matches numeric strings consistent with British Columbia's Personal Health Number (PHN). Requires a ten-digit numeric string with optional hyphen (-) or spaces after the fourth and seventh digits.

  • Discovered.Country.Canada

  • Discovered.Entity.British Columbia Health Network Number

CANADA_OHIP

Matches alphanumeric strings consistent with Ontario's Health Insurance Plan (OHIP). Requires a twelve-digit alphanumeric code. Optional hyphens (-) or spaces can appear after the fourth, seventh, and tenth digits. The final two characters are a checksum.

  • Discovered.Country.Canada

  • Discovered.Entity.Ontario Health Insurance Number

CANADA_PASSPORT

Matches strings consistent with the Canadian Passport Number format as described here.

  • Discovered.Country.Canada

  • Discovered.Entity.Passport

CANADA_QUEBEC_HIN

Matches alphanumeric strings consistent with Quebec's Health Insurance Number (HIN). Requires four alphabetic characters followed by an optional space or hyphen (-), and then eight digits with an optional hyphen or space after the fourth digit.

  • Discovered.Country.Canada

  • Discovered.Entity.Quebec Health Insurance Number

CREDIT_CARD_NUMBER

Matches strings consistent with a credit card number with prefixes matching major credit card companies. Must include a valid checksum.

  • Discovered.Entity.Credit Card Number

DATE

Matches strings consistent with dates. These can include days of the week, dates, and date times.

  • Discovered.Entity.Date

DENMARK_CPR_NUMBER

Matches numeric strings consistent with Personal Identification Number (CPR-number or Person-number). Requires a ten-digit number with either a DDMMYY-SSSS or DDMMYYSSSS format. The first six digits are an individual's birth date in Day, Month, Year format. The final four digits comprise the sequence number.

  • Discovered.Country.Denmark

  • Discovered.Entity.CPR Number

DOMAIN_NAME

Matches domain names using a very broad pattern.

  • Discovered.Entity.Domain Name

EMAIL_ADDRESS

Detect strings consistent with an email address. Usernames are required to be fewer than 255 characters, follow by @a, a domain of fewer than 255 characters, and a top level domain of between 2 and 20 characters.

  • Discovered.Entity.Electronic Mail Address

ETHNIC_GROUP

Matches strings consistent with the US Census race designations.

  • Discovered.Entity.Ethnic Group

FDA_CODE

Matches a string consistent with a drug or ingredient registered with Food and Drug Administration (FDA). Must start with between 4 to 6 digits, followed by a hyphen, followed by 3 to 4 digits, followed by a hyphen, and finishing with one to two digits.

  • Discovered.Country.US

  • Discovered.Entity.FDA Code

FINLAND_NATIONAL_ID_NUMBER

Matches a string consistent with Finland's National ID number. Requires an eleven-character string in a DDMMYYCZZZQ format. The first six digits are an individual's birth date in Day, Month, Year format. The C character is a century of birth indicator (+ for the years 1800-1899, - for years 1900-1999, and A for years 2000-2099). ZZZ is an individual ID number, and Q is a required checksum.

  • Discovered.Country.Finland

  • Discovered.PHI

  • Discovered.Entity.National ID Number

FRANCE_CNI

Matches numeric strings consistent with the French National ID card number (carte nationale d'identité). Requires a twelve-digit numeric string.

  • Discovered.Country.France

  • Discovered.Entity.CNI

FRANCE_NIR

Matches numeric strings consistent with France's National ID number (Numéro d'Inscription au Répertoire). Requires a fifteen-digit numeric string. An optional hyphen (-) or space can appear after the 13th digit. The 14th and 15th digits act as a checksum.

  • Discovered.Country.France

  • Discovered.Entity.NIR

FRANCE_PASSPORT

Matches alphanumeric strings consistent with the French Passport number. Requires two numbers followed by two upper case letters and ends with 5 digits.

  • Discovered.Country.France

  • Discovered.Entity.Passport

GENDER

Matches strings consistent with gender or gender abbreviations.

  • Discovered.Entity.Gender

GERMANY_DRIVERS_LICENSE_NUMBER

Matches alphanumeric strings consistent with Germany's Driver's License number. Requires an eleven-element string, with a digit or a letter followed by two digits, 6 digits or letters, one digit, and one digit or letter.

  • Discovered.Country.Germany

  • Discovered.Entity.Drivers License Number

GERMANY_IDENTITY_CARD_NUMBER

Matches alphanumeric strings consistent with Germany's Identity Card number. Requires a single letter followed by eight digits.

  • Discovered.Country.Germany

  • Discovered.Entity.Identity Card Number

IBAN_CODE

Matches strings consistent with an International Bank Account Number (IBAN). Must contain a valid country code.

  • Discovered.Entity.IBAN Code

ICD10_CODE

Matches strings consistent with codes from the International Statistical Classification of Diseases and Related Health Problems (ICD), as drawn from the Clinical Modification lexicon from the year 2020.

  • Discovered.Entity.ICD10 Code

IMEI_HARDWARE_ID

Matches strings consistent with an International Mobile Equipment Identity (IMEI) number. Must contain 15 digits with optional hyphens or spaces after the second, 8th, and 14th digits.

  • Discovered.Entity.IMEI

IP_ADDRESS

Matches IP Addresses in the V4 and V6 formats.

  • Discovered.Entity.IP Address

LOCATION

Matches strings consistent with Countries or Municipalities. By default focuses on locations in the United States.

  • Discovered.Entity.Location

MAC_ADDRESS

Matches strings consistent with a Media Access Control (MAC) address. Must contain twelve hexadecimal digits, with every two digits separated by a colon.

  • Discovered.Entity.MAC Address

MAC_ADDRESS_LOCAL

Matches strings consistent with a local Media Access Control (MAC) address.

  • Discovered.Entity.MAC Address Local

PERSON_NAME

Matches strings consistent with a dictionary of people's names. Names are drawn from the US Social Security database. This identifier must match at least 45% of the data sampled.

  • Discovered.Entity.Person Name

PHONE_NUMBER

Matches strings consistent with telephone numbers. Primarily looks for strings consistent with the United States telephone numbers naming convention.

  • Discovered.Entity.Telephone Number

POSTAL_CODE

Matches strings consistent with a valid US zip code with an optional +4. Only valid 5 digit zip codes are detected.

  • Discovered.Entity.Postal Code

SPAIN_NIE_NUMBER

Matches strings consistent with Spain's Foreigner Identification number. Requires an eight-character string. The initial character must be X, Y, or Z, followed by seven digits, then by an optional hyphen or space and a single checksum character.

  • Discovered.Country.Spain

  • Discovered.Entity.NIE Number

SPAIN_NIF_NUMBER

Matches strings consistent with Spain's Tax Identification number. Requires an eight-character string. Requires eight digits followed by an optional hyphen or space and a single checksum character.

  • Discovered.Country.Spain

  • Discovered.Entity.NIF Number

SPAIN_PASSPORT

Matches strings consistent with Spain's Passport number. Requires an eight- or nine-character string, starting with either two or three letters followed by six digits.

  • Discovered.Country.Spain

  • Discovered.Entity.Passport

STREET_ADDRESS

Matches strings consistent with street addresses. Primarily looks for strings consistent with the United States street naming convention. This identifier must match at least 80% of the data sampled.

  • Discovered.Entity.Location

SWEDEN_NATIONAL_ID_NUMBER

Matches numeric strings consistent with Sweden's Nation ID number. Requires a ten- or twelve-digit string that must start with a date in either the YYMMDD or YYYYMMDD formats. An optional - or + character then separates four ending digits. The final digit is a checksum.

  • Discovered.Country.Sweden

  • Discovered.Entity.National ID Number

SWEDEN_PASSPORT

Matches numeric strings consistent with Sweden's Passport number. Requires an 8-digit number.

  • Discovered.Country.Sweden

  • Discovered.Entity.Passport

SWIFT_CODE

Matches alphanumeric strings consistent with a SWIFT code (or Bank Identifier Code (BIC)) format.

  • Discovered.Entity.Swift Code

THAILAND_NATIONAL_ID_NUMBER

Matches strings consistent with Thailand's National ID number. Requires a 13-digit number with optional spaces or hyphens (-) after the first, fifth, tenth, and twelfth digits. The final digit is a checksum.

  • Discovered.Country.Thailand

  • Discovered.Entity.National ID Number

TIME

Matches strings consistent with times. Can contain both date and time pieces.

  • Discovered.Entity.Date

UK_DRIVERS_LICENSE_NUMBER

Matches alphanumeric strings consistent with the United Kingdom's Driver's License number. Requires either a 16- or 18-character string. The first five characters represent the driver's surname, padded with 9s, followed by a single digit for decade of birth, two digits for month of birth (incremented by 50 for female drivers), two digits for day of birth, one digit for year of birth, two letters, an arbitrary digit, and two digits. Two additional digits can be present for each license issuance.

  • Discovered.Country.UK

  • Discovered.Entity.Drivers License Number

UK_NATIONAL_INSURANCE_NUMBER

Matches alphanumeric strings consistent with the United Kingdom's National Insurance number. Requires a nine-character string. The first two digits must be letters, followed by an optional space, then six digits with optional spaces or hyphens (-) every two digits, ending with a letter.

  • Discovered.Country.UK

  • Discovered.Entity.National Insurance Number

UK_TAXPAYER_REFERENCE

Matches ten-digit numeric strings consistent with UK Taxpayer Reference (UTR) numbers. The final digit is a checksum.

  • Discovered.Country.UK

  • Discovered.Entity.Taxpayer Reference

URL

Matches string consistent with a Uniform Resource Locator (URL). String must begin with http://, https://, ftp://, file:///, or mailto:, followed by a string and ending with a top level domain of no more than 128 characters.

  • Discovered.Entity.URL

US_ADOPTION_TAXPAYER_IDENTIFICATION_NUMBER

Matches a numeric string consistent United States Adoption Taxpayer Identification Number (ATIN). Requires a string similar in format to a US Social Security Number, but starting with a 9 in the Area Number and having 93 as an allowed Group Number.

  • Discovered.Country.US

  • Discovered.Entity.Adoption Taxpayer ID Number

US_BANK_ROUTING_MICR

Matches numeric string consistent with an American Bankers Association (ABA) Routing Number. Must be a nine-digit number starting with 0, 1, 2, 3, 6, or 7, followed by eight digits. The final digit is a checksum.

  • Discovered.Country.US

  • Discovered.Entity.Bank Routing MICR

US_DEA_NUMBER

Matches alphanumeric strings consistent with a Drug Enforcement Administration (DEA) number that is assigned to a health care provider. Must be a length of nine characters. The first two digits must be alphanumeric, and the last seven digits must be digits. The final digit is a checksum.

  • Discovered.Country.US

  • Discovered.Entity.DEA Number

US_EMPLOYER_IDENTIFICATION_NUMBER

Matches numeric string consistent United States Employer Identification Number (EIN). Strings must contain nine digits with a hyphen after the second digit.

  • Discovered.Country.US

  • Discovered.Entity.Employer ID Number

US_HEALTHCARE_NPI

Matches numeric strings consistent with US National Provider Identifier (NPI). Strings must be either 10 or 15 digits with the final digit being a valid checksum.

  • Discovered.Country.US

  • Discovered.Entity.Healthcare NPI

US_INDIVIDUAL_TAXPAYER_IDENTIFICATION_NUMBER

Matches a numeric string consistent United States Individual Taxpayer Identification Number (ITIN). Requires a string similar in format to a US Social Security Number, but starting with a 9 in the Area Number and having a limited set of allowed Group Numbers.

  • Discovered.Country.US

  • Discovered.Entity.Individual Taxpayer ID Number

US_PASSPORT

Matches numeric strings consistent with United States Passport number. Strings must contain nine digits.

  • Discovered.Country.US

  • Discovered.Entity.Passport

US_PREPARER_TAXPAYER_IDENTIFICATION_NUMBER

Matches strings consistent with a Preparer Taxpayer ID number. Strings must have nine characters, starting with a P that is followed by 8 digits.

  • Discovered.Country.US

  • Discovered.Entity.Preparer Taxpayer ID Number

US_SOCIAL_SECURITY_NUMBER

Matches strings consistent with a US Social Security Number. Strings must contain nine digits and comprise three parts: the three left-most digits designating the area number, the middle two digits designating the group number, and the four right-most digits designating the serial number. For a column to be tagged, none of these parts can contain all zeroes, and area numbers must not be 666 or in the range of 900-999.

  • Discovered.Country.US

  • Discovered.Entity.Social Security Number

US_STATE

Matches strings consistent with either a full name or two-letter abbreviation of a US state or territory.

  • Discovered.Country.US

  • Discovered.Entity.State

US_TOLLFREE_PHONE_NUMBER

Matches strings consistent with a US toll-free telephone number. Allowed area codes are 800, 88+any digit, or 899.

  • Discovered.Country.US

  • Discovered.Entity.Tollfree Telephone Number

VEHICLE_IDENTIFICATION_NUMBER

Matches strings consistent with Vehicle Identification Numbers. A checksum is required as well as a valid World Manufacturer Identifier.

  • Discovered.Country.US

  • Discovered.Entity.Vehicle Identifier or Serial Number

Last updated

Was this helpful?

Self-managed versions

2024.32024.22024.1

Copyright © 2014-2024 Immuta Inc. All rights reserved.