Cloudflare Zero Trust provides predefined DLP profiles for common types of sensitive data. Some profiles include built-in validation checks to increase detection granularity. Additionally, you can configure advanced settings for predefined profiles.
Credit card numbers begin with a six or eight-digit Issuer Identification Number (IIN) and are followed by up to 23 additional digits. CVVs are not validated.
|American Express Card Number||Validated using Luhn’s algorithm.|
|American Express Text||Text matching |
|Diners Club Card Number||Validated using Luhn’s algorithm.|
|Generic CVV Card Number||Validated with regex.|
|Mastercard Card Number||Validated using Luhn’s algorithm.|
|Mastercard Text||Text matching |
|Union Pay Card Number||Validated using Luhn’s algorithm.|
|Union Pay Text||Text matching |
|Visa Card Number||Validated using Luhn’s algorithm.|
|Visa Text||Text matching |
|United States ABA Routing Number||Validated algorithmically with checksum.|
|IBAN||Validated with checksum.|
Detections are validated algorithmically when possible.
|United States SSN Numeric Detection||Commonly used separators are required to match the detection entry. For example, |
|Social Security Number Text||Text matching |
|Australia Tax File Number||Validated with checksum.|
|Canada Social Insurance Number||Validated using Luhn’s algorithm.|
|France Social Security Number||Validated with regex.|
|Singapore National Registration Identity Card Number||Validated with checksum.|
|Taiwan National Identification Number||Validated with checksum.|
|United Kingdom NHS Number||Validated with checksum.|
|United Kingdom National Insurance Number||Validated with regex.|
Credentials and secrets
The following secrets are validated with regex.
- Google Cloud Platform keys
- AWS keys
- Azure API keys
- SSH keys