Country pack
India PII detection: PAN, Aadhaar number
Short answer
Maskflare's India pack has 6 detectors. 2 validate a check digit or letter, 1 tests layout or an embedded date, 3 match on pattern alone.
What the India pack covers
The India pack holds 6 detectors: Aadhaar number, Aadhaar number, unformatted, Bank account number, Permanent account number (PAN), Phone number and Postal code. 2 of them recompute a check digit or letter, 1 tests layout or an embedded date only, 3 are pattern-only, and 3 wait for a keyword before they match.
| Detector | Category | Validation | Valid example |
|---|---|---|---|
| Aadhaar number | national ID number | Checksum | 2341 2341 2346 |
| Aadhaar number, unformatted | national ID number | Checksum | 234123412346 |
| Bank account number | bank account number (IBAN) | Pattern only | 123456789012 |
| Permanent account number (PAN) | tax ID | Pattern only | ABCPE1234F |
| Phone number | phone number | Layout rules | +91 98765 43210 |
| Postal code | postal code | Pattern only | 110001 |
Every India detector in detail
Aadhaar number
A national identity number. Validation: a Verhoeff check digit and a first digit of 2 to 9. Valid example: 2341 2341 2346; the same shape that fails is 2341 2341 2340. Full guide: Indian Aadhaar number.
Aadhaar number, unformatted
A national identity number. Validation: a Verhoeff check digit and a first digit of 2 to 9. It needs one of 5 keywords within 48 characters before the value, such as aadhaar, aadhar, uid number, uidai. Valid example: 234123412346; the same shape that fails is 234123412340.
Bank account number
A bank account identifier. Validation: the pattern only, with no checksum or structural validator. It needs one of 8 keywords within 48 characters before the value, such as a/c, account no, account number, acct. Valid example: 123456789012.
Permanent account number (PAN)
A tax identifier. Validation: the pattern only, with no checksum or structural validator. Valid example: ABCPE1234F.
Phone number
A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. Valid example: +91 98765 43210.
Postal code
A postal code, which identifies a place rather than a person on its own. Validation: the pattern only, with no checksum or structural validator. It needs one of 8 keywords within 48 characters before the value, such as pin code, pincode, post code, postal code. Valid example: 110001.
Local-language context words for India
These are the words in the catalogue that confirm a value as belonging to this country's detector. Shared English words such as ID number or tax id are left out here because many packs use them; a word below points at this pack even when other packs are on.
- Aadhaar number, unformatted:
aadhaar,aadhar,uid number,uidai,आधार - Bank account number:
a/c,account no,account number,acct,bank account,ifsc,khata,खाता संख्या - Postal code:
pin code,pincode,post code,postal code,postcode,zip,zip code,zipcode
How Maskflare masks India identifiers
Detections are replaced with a token such as mf_mask_d7e0 before the request goes to the AI provider, and with response restoration turned on the real value is put back in the answer. The other actions are redact, partial, hash, format-preserving encryption, generalize, alert and block.
- Protect now, Finance - Protect now, Healthcare and Developer: mask (a reversible token) when India is a primary country.
- Monitor first: alert (counted, forwarded unchanged) when India is a primary country.
None of the compliance profiles (HIPAA Safe Harbor, GDPR (EU/EEA), UK GDPR, PCI DSS v4.0, US PII (CCPA/CPRA) and Swiss nDSG health data) includes the India pack. Its detectors run when India is chosen as a primary country or the pack is enabled directly.
Limits worth knowing
- A passing checksum shows that a value is well formed, not that it was issued to a real person. The examples on this page pass for that reason and are not real.
- 3 of the 6 detectors here match on pattern alone (Bank account number, Permanent account number (PAN) and Postal code), so they can match text that merely has the same shape.
- Detectors read the text of the request. A value inside an image is found only after OCR, and a value split across lines is not one match.
- Names, addresses and free-text details are handled by other packs. This page is limited to the India identifiers.
Frequently asked questions
What does Maskflare detect for India?
6 detectors: Aadhaar number, Aadhaar number, unformatted, Bank account number, Permanent account number (PAN), Phone number and Postal code.
Are India identifiers masked by default?
They are masked when India is chosen as a primary country (the default Protect now template uses the action mask), or when the pack is turned on directly. A country pack is not on for organisations that did not choose the country.
Which India identifiers have a checksum?
Aadhaar number and Aadhaar number, unformatted.
Do the India detectors need keywords?
3 of them do: Aadhaar number, unformatted, Bank account number and Postal code.
Rules on this page describe what Maskflare's detectors and validators check. They are read from the detection catalogue and are not the specification of the body that issues the identifier. Examples are synthetic.