Redacting Documents Before They Go to an LLM, Without Making Them Useless
Black boxes make a document safe and useless to a model. Consistent tokens like [US_SSN_1] keep the structure the model needs while the real values never leave your system.
Read article → GlobalWhy Your Redaction Tool Thinks Every Invoice Number Is an SSN
Pattern matching flags any nine digits as a Social Security number. Checksums for cards, IBANs, NHS numbers, SINs and CPFs fix most of that, and here is how each one works.
Read article → GlobalRedacting a Passport: The Two Lines at the Bottom Give Everything Away
Blacking out the passport number and photo is not enough. The machine-readable zone repeats the name, number, nationality and date of birth in plain text, and anyone can decode it.
Read article → For LendersCo-Lending and KYC Documents: What the Partner Bank Actually Receives
In a co-lending arrangement the KYC file moves between two regulated entities. Who holds the unmasked Aadhaar, whose retention policy applies, and what to fix before the next audit.
Read article → ComplianceWhat to Redact on a Bank Statement (and What You Must Not)
Account numbers, IFSC codes and the identifiers hiding in a bank statement — and why automatic account-number detection destroys documents more often than it protects them.
Read article → ComplianceThe Identifiers Everyone Forgets: Driving Licence, Voter ID and Passport
Most redaction work stops at Aadhaar and PAN. Indian KYC folders are full of driving licences, voter EPICs and passports carrying identifiers that nothing is looking for.
Read article → ComplianceHow Long Should You Keep KYC Documents in India?
Retention periods for KYC records in India, the difference between keeping a record and keeping a readable document, and why most institutions hold far more than they are required to.
Read article → EngineeringOn-Premise or API for Document Masking? The Questions That Actually Decide It
Security teams default to on-premise for document processing. Here is what that decision actually costs, what it genuinely buys, and the three questions that settle it either way.
Read article → ComplianceHow to Check a Vendor's No-Retention Claim
Almost every document processing vendor claims no retention. The claim has at least four different meanings. Six questions that tell you which one you are being sold.
Read article → VerificationHow to Prove an Aadhaar Card Was Forged
UIDAI signs the Secure QR, so altered printed text no longer matches it. Why that beats a tamper score, the resolution limit nobody mentions, and the three things it cannot tell you.
Read article → OCRAadhaar OCR: What Breaks on Real Documents
Extraction failures return HTTP 200. Year-only cards, expanded initials, address components wrong a fifth of the time, and the sixteen-digit number that is not an Aadhaar number — plus a fifteen-document test set.
Read article → OCRShould Your KYC OCR Return the Full Aadhaar Number?
Every extraction API returns it by default. Most callers cannot verify it, never use the first eight digits, and turn their customer master into a joinable table of Aadhaar numbers by accepting it.
Read article → KYCWhy Aadhaar Masking Matters in KYC
Most organisations that collect a full Aadhaar number cannot verify it and never use the first eight digits. What the number adds is not capability — it is liability, and here is how that liability works.
Read article → KYCAadhaar, VID, Masked Copy or Offline e-KYC: What to Collect
Four artefacts can stand in for an Aadhaar number and they are not interchangeable. Which one each use case actually requires, why a stored Virtual ID breaks, and the checksum trap that catches masking tools.
Read article → ComplianceProving Aadhaar Masking Happened: What Auditors Ask For
"We mask Aadhaar numbers" is a claim, not evidence. The five questions an auditor asks, why a zero redaction count is the failure that looks like success, and what a defensible masking log contains.
Read article → ComplianceUIDAI Rules on Aadhaar Masking: When a Masked Copy Is Enough
What the Aadhaar Act and the 2018 Supreme Court judgment actually require, why an organisation that cannot verify your number is only filing it, and what to say when someone insists on the full one.
Read article → ComplianceThe DPDP Act and Your KYC Documents
The 2023 Act barely mentions Aadhaar, and still changes the arithmetic on holding full numbers — purpose limitation, breach notification without a threshold, and the retention gap most teams miss.
Read article → For DevelopersBuilding a KYC Pipeline Where No Unmasked Aadhaar Survives
Masking is one API call. The five places documents leak anyway — logs, error trackers, snapshots, queues, and the review pile you just created — are never in the architecture diagram.
Read article → EngineeringPAN Card Masking: What to Redact, and Why Naive Detection Gets It Wrong
What each character of a PAN encodes, why a permanent identifier is worth masking, and how a detector ends up redacting a date of birth while leaving the real number untouched.
Read article → EngineeringWhy Aadhaar Masking Fails: Rotated Cards, VIDs and the Verhoeff Checksum
Five specific failure modes, including the one that silently returns an unmasked card on a two-sided printout — and why the Virtual ID makes naive twelve-digit matching unsafe.
Read article → For DevelopersAadhaar Masking API: A Practical Integration Guide
The request takes twenty minutes. Knowing when masking silently failed, handling unreadable documents, and sizing timeouts for batch jobs is the part that causes incidents.
Read article → For LendersAadhaar Masking for Housing Finance Companies
HFCs hold more Aadhaar copies per file, for longer, than most lenders. Why batch masking leaves your backups exposed, and what to ask a vendor before you sign.
Read article → For IndividualsYou Shouldn't Share Your Aadhaar Without Masking It First — Here's Why
Most Indians hand over unmasked Aadhaar copies to landlords, hospitals, and hotels without a second thought. UIDAI says you don't have to — and here's what's actually at risk.
Read article → For Financial InstitutionsAadhaar Masking for NBFCs, Banks and Fintech: The Compliance Requirement Most Are Getting Wrong
UIDAI requires that Aadhaar copies stored by financial institutions must be masked before storage. Most NBFCs and banks aren't compliant. Here's what the requirement actually says and how to fix it.
Read article → For Insurance CompaniesHow Indian Insurance Companies Should Handle Customer Aadhaar Documents — A Compliance Guide
Insurers collect Aadhaar at every stage — policy issuance, claims, group KYC. IRDAI and UIDAI are clear on what must happen next. Most insurers aren't there yet.
Read article →No articles match . Try a shorter phrase, or .