Confidential Data Detection

Nullify inspects every diff for sensitive personal information that should never live in source control. When detected, the finding appears in the secrets channel with the relevant PII category and rotation guidance.

Categories We Classify

• Personal information: surnames, email addresses, phone numbers, postal addresses, dates of birth.

• Financial information: payment card numbers and bank identifiers.

• Location and identity data sourced from structured dumps or seed files.

All detections currently focus on English-language datasets.

Example Workflow

1. A developer commits a seed file containing realistic user records (create.sql).

2. Nullify analyses the diff, labels the exposure as Personal Information, and posts the finding to the dashboard.

3. The reviewer can remediate, suppress with justification, or convert the event into a campaign task.

Sample SQL seed file

Example PII alert

💡 PII detection is available to enterprise tenants on request. Contact your Nullify representative to enable it for your environment.