🔒 PII & Data-Leak Scanner

Catch personal data before code or logs are shared

Scan local SQL, CSV, JSON, seed, fixture, and log files for PII-indicating column or key names and email-, SSN-, card-, and phone-like values. Get severity-ranked file and line findings without sending data to an external service.

Keep detected values out of the report

The v1.1 scanner replaces matched email-, SSN-, card-, and phone-like values with redacted placeholders and limits structural evidence to the matched key or column name. Reports preserve the location, rule, and remediation without copying nearby record content.

Run locally and read-only

The bundled scanner uses only the Python 3 standard library. It requires no third-party package, network access, API key, environment variable, database connection, secret read, or file write.

Know what it can and cannot conclude

The scanner uses regex and keyword heuristics, so false positives and false negatives are possible. It covers common PII indicators and US-style SSN, card, and phone patterns; it is not a DLP system, legal advice, or proof of GDPR, CCPA, or SOC 2 compliance.

Review evidence before remediation

Confirm whether a match is real personal data, synthetic test data, an expected schema field, or a harmless format match. The included checklist helps reviewers document context, minimization, retention, access, and the next human decision.