InfoType detector reference

Stay organized with collections Save and categorize content based on your preferences.

Cloud Data Loss Prevention uses information types—or infoTypes—to define what it scans for. An infoType is a type of sensitive data, such as a name, email address, telephone number, identification number, or credit card number.

Every infoType defined in Cloud DLP has a corresponding detector. Cloud DLP uses infoType detectors in the configuration for its scans to determine what to inspect for and how to transform findings. InfoType names are also used when displaying or reporting scan results.

For more in-depth information about infoType detectors, see InfoTypes and infoType detectors.

The Cloud DLP team releases new infoType detectors and groups periodically. To get the latest list of built-in infoTypes, call the infoTypes.list method of Cloud DLP.


InfoType Description

Identifiers used by developers to track users for advertising purposes. These include Google Play Advertising IDs, Amazon Advertising IDs, Apple's identifierForAdvertising (IDFA), and Apple's identifierForVendor (IDFV).


An age measured in months or years.


A credit card number is 12 to 19 digits long. They are used for payment transactions globally.


A credit card track number is a variable length alphanumeric string. It is used to store key cardholder information.


A date. This infoType includes most date formats, including the names of common world holidays.


A date that is identified by context as a date of birth. Note: Not recommended for use during latency sensitive operations.


A domain name as defined by the DNS standard.


An email address identifies the mailbox that emails are sent to or from. The maximum length of the domain name is 255 characters, and the maximum length of the local-part is 64 characters.


A person’s ethnic group.


A common female name. Note: Not recommended for use during latency sensitive operations.


A first name is defined as the first part of a PERSON_NAME. Note: Not recommended for use during latency sensitive operations.


A person’s gender identity.


Alphanumeric and special character strings that may be personally identifying but do not belong to a well-defined category, such as user IDs or medical record numbers.


An International Bank Account Number (IBAN) is an internationally agreed-upon method for identifying bank accounts defined by the International Standard of Organization (ISO) 13616:2007 standard. The European Committee for Banking Standards (ECBS) created ISO 13616:2007. An IBAN consists of up to 34 alphanumeric characters, including elements such as a country code or account number.


An HTTP cookie is a standard way of storing data on a per website basis. This detector will find headers containing these cookies.


An Integrated Circuit Card Identifier (ICCID) is used to uniquely identify each SIM card.


The International Classification of Diseases, Ninth Revision, Clinical Modification (ICD-9-CM) lexicon is used to assign diagnostic and procedure codes associated with inpatient, outpatient, and physician office use in the United States. The US National Center for Health Statistics (NCHS) created the ICD-9-CM lexicon. It is based on the ICD-9 lexicon, but provides for more morbidity detail. The ICD-9-CM lexicon is updated annually on October 1.


Like ICD-9-CM codes, the International Classification of Diseases, Tenth Revision, Clinical Modification (ICD-10-CM) lexicon is a series of diagnostic codes. The World Health Organization (WHO) publishes the ICD-10-CM lexicon to describe causes of morbidity and mortality.


An International Mobile Equipment Identity (IMEI) hardware identifier, used to identify mobile phones.


An International Mobile Subscriber Identity (IMSI) identifier is used to identify a telecommunications network subscription. An IMSI_ID indirectly identifies a user, whose subscription is bound to a given SIM card with a publicly known MSISDN number. It includes information such as the mobile country code (MCC) and the mobile network code (MNC) of the network that the card is provisioned in.


An Internet Protocol (IP) address (either IPv4 or IPv6).


A last name is defined as the last part of a PERSON_NAME.

Note: Not recommended for use during latency sensitive operations.

A physical address or location. Note: Not recommended for use during latency sensitive operations.


A specific location as noted by a latitude-longitude pair or an S2 cell ID.

MAC_ADDRESS A media access control address (MAC address), which is an identifier for a network adapter.
MAC_ADDRESS_LOCAL A local media access control address (MAC address), which is an identifier for a network adapter.

A common male name.

Note: Not recommended for use during latency sensitive operations.

A generic medical record number.


Terms that commonly refer to a person's medical condition or health.


A name of a chain store, business or organization.

Note: Not recommended for use during latency sensitive operations.

A passport number that matches passport numbers for the following countries: Australia, Canada, China, France, Germany, Japan, Korea, Mexico, The Netherlands, Poland, Singapore, Spain, Sweden, Taiwan, United Kingdom, and the United States.


A full person name, which can include first names, middle names or initials, and last names. Note: Not recommended for use during latency sensitive operations.


A telephone number.


A street address. Note: Not recommended for use during latency sensitive operations.


A SWIFT code is the same as a Bank Identifier Code (BIC). It's a unique identification code for a particular bank. These codes are used when transferring money between banks, particularly for international wire transfers. Banks also use the codes for exchanging other messages.


A storage signed policy document is an HTML form used to upload objects. These uploads can overwrite existing objects and may contain many form fields (some of which may be optional) for further customization. All forms will use the * and will be used for individual file uploads within a POST request form. The form must be UTF-8 encoded.


A storage signed URL is a URL that provides time-limited resource access to anyone in possession of the URL, regardless of whether they have a Google account. Signed URLs contain authentication information in their query string, allowing users without credentials to perform specific actions on a resource.


A timestamp of a specific time of day.


A Uniform Resource Locator (URL).


A value-added tax identification number is used as an identifier for anything related to a valued-added tax. The following are the supported countries:

  • Belgium
  • France
  • Germany
  • Hungary
  • Indonesia
  • Italy
  • Netherlands

A vehicle identification number (VIN) is a unique 17-digit code assigned to every on-road motor vehicle.

Credentials and secrets

The infoType detectors in this section detect credentials and other secret data.

InfoType Description

An authentication token is a machine-readable way of determining whether a particular request has been authorized for a user. This detector currently identifies tokens that comply with OAuth or Bearer authentication.


Amazon Web Services account access keys.


Microsoft Azure certificate credentials for application authentication.


A basic authentication header is an HTTP header used to identify a user to a server. It is part of the HTTP specification in RFC 1945, section 11.


An encryption key within configuration, code, or log text.


Google Cloud API key. An encrypted string that is used when calling Google Cloud APIs that don't need to access private user data.


Google Cloud service account credentials. Credentials that can be used to authenticate with Google API client libraries and service accounts.


JSON Web Token. JSON Web Token in compact form. Represents a set of claims as a JSON object that is digitally signed using JSON Web Signature.


An HTTP cookie is a standard way of storing data on a per website basis. This detector will find headers containing these cookies.


An OAuth client secret in configuration files, JSON, URLs, or other text.


Clear text passwords in configs, code, and other text.


A weakly hashed password is a method of storing a password that is easy to reverse engineer. The presence of such hashes often indicate that a system's security can be improved.


An XSRF token is an HTTP header that is commonly used to prevent cross-site scripting attacks. Cross-site scripting is a type of security vulnerability that can be exploited by malicious sites.


An SSL certificate is a cryptographic certificate used to verify identity and establish secured connections using the Secure Sockets Layer protocol.


InfoType Description

An Argentine Documento Nacional de Identidad (DNI), or national identity card, is used as the main identity document for citizens.


InfoType Description

An Australian driver's license number.


A 9-digit Australian Medicare account number is issued to permanent residents of Australia (except for Norfolk island). The primary purpose of this number is to prove Medicare eligibility to receive subsidized care in Australia.


An Australian passport number.


An Australian tax file number (TFN) is a number issued by the Australian Tax Office for taxpayer identification. Every taxpaying entity, such as an individual or an organization, is assigned a unique number.


InfoType Description

A 12-digit Belgian national identity card number.


InfoType Description

The Brazilian Cadastro de Pessoas Físicas (CPF) number, or Natural Persons Register number, is an 11-digit number used in Brazil for taxpayer identification.


InfoType Description

A Canadian bank account number.


The British Columbia Personal Health Number (PHN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of British Columbia.


A driver's license number for each of the ten provinces in Canada (the three territories are currently not covered).


The Ontario Health Insurance Plan (OHIP) number is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Ontario.


A Canadian passport number.


The Québec Health Insurance Number (also known as the RAMQ number) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Québec.


The Canadian Social Insurance Number (SIN) is the main identifier used in Canada for citizens, permanent residents, and people on work or study visas. With a Canadian SIN and mailing address, one can apply for health care coverage, driver's licenses, and other important services.


InfoType Description

A Chilean Cédula de Identidad (CDI), or identity card, is used as the main identity document for citizens.


InfoType Description

A Chinese resident identification number.


A Chinese passport number.


InfoType Description

A Colombian Cédula de Ciudadanía (CDC), or citizenship card, is used as the main identity document for citizens.


InfoType Description

A Personal Identification Number (CPR, Det Centrale Personregister) is a national ID number in Denmark. It is used with public agencies such as health care and tax authorities. Banks and insurance companies also use it as a customer number. The CPR number is required for people who reside in Denmark, pay tax or own property there.


InfoType Description

The French Carte Nationale d'Identité Sécurisée (CNI or CNIS) is the French national identity card. It's an official identity document consisting of a 12-digit identification number. This number is commonly used when opening bank accounts and when paying by check. It can sometimes be used instead of a passport or visa within the European Union (EU) and in some other countries.


The French Numéro d'Inscription au Répertoire (NIR) is a permanent personal identification number that's also known as the French social security number for services including healthcare and pensions.


A French passport number.


The French tax identification number is a government-issued ID for all individuals paying taxes in France.


InfoType Description

A Finnish personal identity code, a national government identification number for Finnish citizens used on identity cards, driver's licenses and passports.


InfoType Description

A German driver's license number.


The German Personalausweis, or identity card, is used as the main identity document for citizens of Germany.


A German passport number. The format of a German passport number is 10 alphanumeric characters, chosen from numerals 0–9 and letters C, F, G, H, J, K, L, M, N, P, R, T, V, W, X, Y, Z.


An 11-digit German taxpayer identification number assigned to both natural-born and other legal residents of Germany for the purposes of recording tax payments.


A German Schufa identification number. Schufa Holding AG is a German credit bureau whose aim is to protect clients from credit risk.

Hong Kong

InfoType Description

The 香港身份證, or Hong Kong identity card (HKIC), is used as the main identity document for citizens of Hong Kong.


InfoType Description

The Indian Aadhaar number is a 12-digit unique identity number obtained by residents of India, based on their biometric and demographic data.


The Indian GST identification number (GSTIN) is a unique identifier required of every business in India for taxation.


The Indian Personal Permanent Account Number (PAN) is a unique 10-digit alphanumeric identifier used for identification of individuals—particularly people who pay income tax. It's issued by the Indian Income Tax Department. The PAN is valid for the lifetime of the holder.


InfoType Description

An Indonesian Single Identity Number (Nomor Induk Kependudukan, or NIK) is the national identification number of Indonesia. The NIK is used as the basis for issuing Indonesian resident identity cards (Kartu Tanda Penduduk, or KTP), passports, driver's licenses and other identity documents.


InfoType Description

An Irish driving license number.


Eircode is an Irish postal code that uniquely identifies an address.


An Irish (IE) passport number.


The Irish Personal Public Service Number (PPS number, or PPSN) is a unique number for accessing social welfare benefits, public services, and information in Ireland.


InfoType Description

The Israel identity card number is issued to all Israeli citizens at birth by the Ministry of the Interior. Temporary residents are assigned a number when they receive temporary resident status.


InfoType Description

An Italy fiscal code number is a unique 16-digit code assigned to Italian citizens as a form of identification.


InfoType Description

A Japanese bank account number.


A Japanese driver's license number.


The Japanese national identification number—sometimes referred to as "My Number"—is a new national ID number as of January 2016.


A Japanese passport number. The passport number consists of two alphabetic characters followed by seven digits.


InfoType Description

A Korean passport number.


A South Korean Social Security number.


InfoType Description

The Mexico Clave Única de Registro de Población (CURP) number, or Unique Population Registry Code or Personal Identification Code number. The CURP number is an 18-character state-issued identification number assigned by the Mexican government to citizens or residents of Mexico and used for taxpayer identification.


A Mexican passport number.

The Netherlands

InfoType Description

A Dutch Burgerservicenummer (BSN), or Citizen's Service Number, is a state-issued identification number that's on driver's licenses, passports, and international ID cards.


A Dutch passport number.

New Zealand

InfoType Description

An IRD number is used in New Zealand by the government, financial institutions, and employers to identify an entity for tax-related events. Each entity is assigned one IRD number by New Zealand's Inland Revenue Department.


InfoType Description

Norway‘s Fødselsnummer, National Identification Number, or Birth Number is assigned at birth, or on migration into the country. It is registered with the Norwegian Tax Office.


InfoType Description

A Paraguayan Cédula de Identidad Civil (CIC), or civil identity card, is used as the main identity document for citizens.


InfoType Description

A Peruvian Documento Nacional de Identidad (DNI), or national identity card, is used as the main identity document for citizens.


InfoType Description

The PESEL number is the national identification number used in Poland. It is mandatory for all permanent residents of Poland and for temporary residents staying there longer than 2 months. It is assigned to just one person and can be changed only in rare cases, such as child adoption, gender reassignment, or birth date adjustment.


The Polish identity card number. is a government identification number for Polish citizens. Every citizen older than 18 years must have an identity card. The local Office of Civic Affairs issues the card, and each card has its own unique number.


A Polish passport number. Polish passport is an international travel document for Polish citizens. It can also be used as a proof of Polish citizenship.


InfoType Description

A Portuguese Cartão de cidadão (CDC), or Citizen Card, is used as the main identity, Social Security, health services, taxpayer, and voter document for citizens.


A Portuguese Número de Identificação Bancária (NIB) , or Banking Identification Number is assigned by the Banco de Portugal and identifies bank accounts for all national interbanking operations.


InfoType Description

A unique set of nine alpha-numeric characters on the Singapore National Registration Identity Card.


A Singaporean passport number.

South Africa

InfoType Description

A South Africa ID number.


InfoType Description

The Spanish Código de Identificación Fiscal (CIF) was the tax identification system used in Spain for legal entities until 2008. It was then replaced by the Número de Identificación Fiscal (NIF) for natural and juridical persons.


A Spain national identity number.


A Spanish driver's license number.


The Spanish Número de Identificación de Extranjeros (NIE) is an identification number for foreigners living or doing business in Spain. An NIE number is needed for key transactions such as opening a bank account, buying a car, or setting up a mobile phone contract.


The Spanish Número de Identificación Fiscal (NIF) is a government identification number for Spanish citizens. An NIF number is needed for key transactions such as opening a bank account, buying a car, or setting up a mobile phone contract.


A Spanish Ordinary Passport (Pasaporte Ordinario) number. There are 4 different types of passports in Spain. This detector is for the Ordinary Passport (Pasaporte Ordinario) type, which is issued for ordinary travel, such as vacations and business trips.


The Spanish Social Security number (Número de Afiliación a la Seguridad Social) is a 10-digit sequence that identifies a person in Spain for all interactions with the country's Social Security system.


InfoType Description

A Swedish Personal Identity Number (personnummer), a national government identification number for Swedish citizens.


A Swedish passport number.


InfoType Description

A Taiwanese passport number.


InfoType Description

The Thai บัตรประจำตัวประชาชนไทย, or identity card, is used as the main identity document for Thai nationals.


InfoType Description

A unique Turkish personal identification number, assigned to every citizen of Turkey.

United Kingdom

InfoType Description

The Scotland Community Health Index Number (CHI number) is a 10-digit sequence used to uniquely identify a patient within National Health Service Scotland (NHS Scotland).


A driver's license number for the United Kingdom of Great Britain and Northern Ireland (UK).


A National Health Service (NHS) number is the unique number allocated to a registered user of the three public health services in England, Wales, and the Isle of Man.


The National Insurance number (NINO) is a number used in the United Kingdom (UK) in the administration of the National Insurance or social security system. It identifies people, and is also used for some purposes in the UK tax system. The number is sometimes referred to as NI No or NINO.


A United Kingdom (UK) passport number.


A United Kingdom (UK) Unique Taxpayer Reference (UTR) number. This number, comprised of a string of 10 decimal digits, is an identifier used by the UK government to manage the taxation system. Unlike other identifiers, such as the passport number or social insurance number, the UTR is not listed on official identity cards.

United States

InfoType Description

An American Bankers' Committee on Uniform Security Identification Procedures (CUSIP) number is a 9-character alphanumeric code that identifies a North American financial security.


Drug product name or active ingredient registered by the United States Food and Drug Administration (FDA).


A United States Adoption Taxpayer Identification Number (ATIN) is a type of United States Tax Identification Number (TIN). An ATIN is issued by the Internal Revenue Service (IRS) to individuals who are in the process of legally adopting a US citizen or resident child.


The American Bankers Association (ABA) Routing Number (also called the transit number) is a nine-digit code. It's used to identify the financial institution that's responsible to credit or entitled to receive credit for a check or electronic transaction.


A US Drug Enforcement Administration (DEA) number is assigned to a health care provider by the US DEA. It allows the health care provider to write prescriptions for controlled substances. The DEA number is often used as a general "prescriber number" that is a unique identifier for anyone who can prescribe medication.


A driver's license number for the United States. Format can vary depending on the issuing state.


A United States Employer Identification Number (EIN) is also known as a Federal Tax Identification Number, and is used to identify a business entity.


The US National Provider Identifier (NPI) is a unique 10-digit identification number issued to health care providers in the United States by the Centers for Medicare and Medicaid Services (CMS). The NPI has replaced the unique provider identification number (UPIN) as the required identifier for Medicare services. It's also used by other payers, including commercial healthcare insurers.


A United States Individual Taxpayer Identification Number (ITIN) is a type of Tax Identification Number (TIN), issued by the Internal Revenue Service (IRS). An ITIN is a tax processing number only available for certain nonresident and resident aliens, their spouses, and dependents who cannot get a Social Security Number (SSN).


A US Medicare Beneficiary Identifier is an identification number that is used on all US Medicare transactions.


A United States passport number.


A United States Preparer Taxpayer Identification Number (PTIN) is an identification number that all paid tax return preparers must use on US federal tax returns or claims for refund submitted to the US Internal Revenue Service (IRS).


A United States Social Security number (SSN) is a 9-digit number issued to US citizens, permanent residents, and temporary residents. This detector will not match against numbers with all zeroes in any digit group (that is, 000-##-####, ###-00-####, or ###-##-0000), against numbers with 666 in the first digit group, or against numbers whose first digit is 9.


A United States state name.


A US toll-free telephone number.


A vehicle identification number (VIN) is a unique 17-digit code assigned to every on-road motor vehicle in North America.


InfoType Description

A Uruguayan Cédula de Identidad (CDI), or identity card, is used as the main identity document for citizens.


InfoType Description

A Venezuelan Cédula de Identidad (CDI), or national identity card, is used as the main identity document for citizens.


In addition to its ability to scan and classify information contained within documents, Cloud DLP can classify documents into multiple enterprise-specific categories. When combined with personally identifiable information (PII) inspection scan results, this classification can be useful for document risk assessment, policy enforcement, and similar use cases.

InfoType Description

Finance regulatory documents include financial regulations, tax laws, rules, and guidelines. They are typically issued by tax or regulatory authorities.


An SEC filing is a formal document submitted to the US Securities and Exchange Commission. The most commonly filed SEC forms are 10-K and 10-Q.


A résumé or a curriculum vitae (CV) document.


A blank legal form or template. This document type typically has multiple areas or boxes left empty to be filled in by an individual, who then submits the form to a legal institution.


A legal brief is a document that advocates a particular outcome of a case, presenting supporting points, law interpretations, and recommendations.


A court order, ruling, or decision is a document produced by the court requesting a specific action from the involved parties.


A law document is a document that contains the text of a law or a regulation.


A pleading is a formal written statement of a party's claims or defenses to another party's claims. Examples include a complaint, a demurrer, or an answer.


A patent or a patent application document.


A source code file.


A system or application software log.


A database backup file.