Personal data discovery
Scan any export for Aadhaar, PAN and children's data
Upload a customer, employee or patient file. GRC Flow flags each field that holds personal data, and a person confirms it before it joins the data inventory.
Watch a scan
A sample export, read one column at a time. Each finding goes to the data inventory for a person to confirm.
customers_export.csv · 3 of 2,400 records shown
- order_idORD-1041
- full_nameNeha R.
- mobile98•••••410
- aadhaar_no2830 •••• 3185
- date_of_birth2011-04-19
- support_notesInvoice on email
| order_id | full_name | mobile | aadhaar_no | date_of_birth | support_notes |
|---|---|---|---|---|---|
| ORD-1041 | Neha R. | 98•••••410 | 2830 •••• 3185 | 2011-04-19 | Invoice on email |
| ORD-1042 | Arjun M. | 87•••••091 | 6821 •••• 1813 | 1987-11-02 | Diagnosed asthma, needs… |
| ORD-1043 | Kiara S. | 99•••••305 | 4417 •••• 2290 | 2013-07-30 | Refund sent |
Find the personal data in a client export
Upload a CSV or JSON of customers, employees or patients. The scan flags fields that look like personal data, and a person confirms or rejects each one before it enters the data inventory.
- Aadhaar (Verhoeff checksum)
- PAN
- GSTIN (checksum)
- Passport
- Voter ID
- Driving licence
- Indian mobile
- UPI ID
- Card number (Luhn)
- IP address
- Date of birth
- Health
- Biometric
- Salary
- Address
Private by design
- The file is parsed in memory and never written to disk.
- At most 200 records are sampled per field.
- Only a masked shape of each value is stored, like +99 99999 99999.
- Nothing from the scan is sent to the AI.
- Ages under 18 are flagged as children's data under Section 9.
Try it on one real client
Sign in and run an assessment, or book a demo and we'll walk you through it.