Built-in sensitivity types that Structural detects

Structural identifies the following types of sensitive values. These include some information types that are considered by many privacy standards and frameworks such as HIPAA, GDPR, CCPA, and PCI.

For more information about the HIPAA and Safe Harbor information types that Structural detects, see the Tonic.ai guide Using Tonic Structural and the Safe Harbor method to de-identify PHI.


  • First

  • Last

  • Full



  • Street address

  • ZIP

  • PO Box

  • City

  • State and two letter abbreviation

  • Country

  • Postal code

Contact information

  • Email address

  • Phone number



Financial information

  • Credit card number

  • International bank account number (IBAN)

  • SWIFT code for bank transfers

  • Money amount

BTC (Bitcoin) address


  • Social Security Number

  • Birth date

  • Gender

  • Biometric identifier, such as finger and voice prints

  • Full face photographic images and similar images

Medical information

  • ICD-9 and ICD-10 codes (Used to identify diseases)

  • Medical record number

  • Health plan beneficiary number

Accounts and licenses

  • Account number

  • Certificate or license number

Network and web location

  • IP address

  • IPv6 address

  • MAC address

  • Web URL

International Mobile Equipment Identity (IMEI)

Vehicle identification number (VIN)

Last updated