Country pack
Spain PII detection: DNI, NSS, IBAN
Short answer
Maskflare's Spain pack has 7 detectors. 4 validate a check digit or letter, 2 test layout or an embedded date, 1 matches on pattern alone.
What the Spain pack covers
The Spain pack holds 7 detectors: DNI, IBAN, Licence plate, NIE (foreigner ID), Social security number (NSS), Phone number and Postal code. 4 of them recompute a check digit or letter, 2 test layout or an embedded date only, 1 is pattern-only, and 2 wait for a keyword before they match.
| Detector | Category | Validation | Valid example |
|---|---|---|---|
| DNI | national ID number | Checksum | 12345678Z |
| IBAN | bank account number (IBAN) | Checksum | ES91 2100 0418 4502 0005 1332 |
| Licence plate | vehicle identifier | Layout rules | 1234 BCD |
| NIE (foreigner ID) | national ID number | Checksum | X1234567L |
| Social security number (NSS) | social security number | Checksum | 281234567840 |
| Phone number | phone number | Layout rules | +34 612 345 678 |
| Postal code | postal code | Pattern only | 28013 |
Every Spain detector in detail
DNI
A national identity number. Validation: a check letter from the number modulo 23. Valid example: 12345678Z; the same shape that fails is 12345678A. Full guide: Spanish DNI.
IBAN
A bank account identifier. Validation: the registered length for the country and the ISO 13616 modulus 97 check. Valid example: ES91 2100 0418 4502 0005 1332; the same shape that fails is ES91 2100 0418 4502 0005 1330.
Licence plate
A vehicle licence plate. Validation: 4 to 10 letters and digits with at least one of each, shaped by the country's plate formats. It needs one of 20 keywords within 48 characters before the value, such as licence plate, licence plate number, license plate, license plate number. Valid example: 1234 BCD.
NIE (foreigner ID)
A national identity number. Validation: a check letter from the number modulo 23, after X, Y or Z is replaced by a digit. Valid example: X1234567L; the same shape that fails is X1234567A. Full guide: Spanish NIE.
Social security number (NSS)
A social security or social insurance number. Validation: a two-digit check from the number modulo 97. A run of digits with no separator is judged by words nearby; the detector's own keywords include naf, nss, numero de afiliacion, número de afiliación. Valid example: 281234567840; the same shape that fails is 281234567841.
Phone number
A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. Valid example: +34 612 345 678.
Postal code
A postal code, which identifies a place rather than a person on its own. Validation: the pattern only, with no checksum or structural validator. It needs one of 9 keywords within 48 characters before the value, such as c.p., codigo postal, código postal, post code. Valid example: 28013.
Local-language context words for Spain
These are the words in the catalogue that confirm a value as belonging to this country's detector. Shared English words such as ID number or tax id are left out here because many packs use them; a word below points at this pack even when other packs are on.
- Licence plate:
licence plate,licence plate number,license plate,license plate number,license tag,matricula,matrícula,number plate,numero de matricula,número de matrícula,placa,plateand 8 more - Social security number (NSS):
naf,nss,numero de afiliacion,número de afiliación,seguridad social - Postal code:
c.p.,codigo postal,código postal
How Maskflare masks Spain identifiers
Detections are replaced with a token such as mf_mask_d7e0 before the request goes to the AI provider, and with response restoration turned on the real value is put back in the answer. The other actions are redact, partial, hash, format-preserving encryption, generalize, alert and block.
- Protect now, Finance - Protect now, Healthcare and Developer: mask (a reversible token) when Spain is a primary country.
- Monitor first: alert (counted, forwarded unchanged) when Spain is a primary country.
Compliance profiles that include the Spain pack: GDPR - EU/EEA.
Limits worth knowing
- A passing checksum shows that a value is well formed, not that it was issued to a real person. The examples on this page pass for that reason and are not real.
- 1 of the 7 detectors here matches on pattern alone (Postal code), so it can match text that merely has the same shape.
- Detectors read the text of the request. A value inside an image is found only after OCR, and a value split across lines is not one match.
- Names, addresses and free-text details are handled by other packs. This page is limited to the Spain identifiers.
Frequently asked questions
What does Maskflare detect for Spain?
7 detectors: DNI, IBAN, Licence plate, NIE (foreigner ID), Social security number (NSS), Phone number and Postal code.
Are Spain identifiers masked by default?
They are masked when Spain is chosen as a primary country (the default Protect now template uses the action mask), or when the pack is turned on directly. A country pack is not on for organisations that did not choose the country.
Which Spain identifiers have a checksum?
DNI, IBAN, NIE (foreigner ID) and Social security number (NSS).
Do the Spain detectors need keywords?
2 of them do: Licence plate and Postal code.
Rules on this page describe what Maskflare's detectors and validators check. They are read from the detection catalogue and are not the specification of the body that issues the identifier. Examples are synthetic.