Financial document redaction for cardholder data and NPI.
Bank statements, loan files and audit packages carry cardholder data and nonpublic personal information. DocArmor sanitizes them before they reach vendors, auditors or analytics teams.
Free 7-day trial, 20 pages. No credit card required.
Cardholder data under PCI DSS
PCI DSS restricts how primary account numbers are displayed and prohibits storing sensitive authentication data after authorization. DocArmor's Financial Identifiers (PCI / GLBA) template finds PANs, card security codes and related data wherever they appear, including handwritten notes on scanned forms.
Nonpublic personal information under GLBA
The Gramm-Leach-Bliley Act protects customers' nonpublic personal information. That goes well beyond account numbers: balances, income, credit scores and loan details can all identify a customer's financial position. The template covers each of them, alongside bank, routing and mortgage numbers.
Keep what the reader needs
Context-aware detection tells a customer's balance from a published interest rate, or a personal account number from your institution's own routing code. Reviewers confirm each finding, so the document stays useful to the auditor who receives it.
From the blog
- SAR confidentiality, and where a SAR's existence leaks in bank records
A SAR, and anything that would reveal one exists, is confidential under the Bank Secrecy Act. Here is what that covers, and where bank records give it away.
- GLBA nonpublic personal information, and where it hides in financial files
Under GLBA, nonpublic personal information covers applications, account history and even being a customer. Here is the rule, and where financial files leak.
- PCI DSS card number masking, and where full card numbers hide in documents
PCI DSS lets a displayed card number show at most the BIN and last four digits, and bans storing the CVV. Here is the rule, and where documents still leak.
FAQ
Finance redaction FAQ
What financial data does DocArmor redact?
Account and cardholder names, primary account numbers, PCI sensitive authentication data, bank and loan account numbers, routing codes, personal balances and income, and credit scores, plus anything you add in plain English.
Is DocArmor itself a PCI DSS-certified service?
DocArmor is a redaction tool that helps you remove cardholder data from documents before sharing them. Documents are deleted when you finish, or kept for later only until the time you choose. Talk to our team about your compliance requirements and how that fits your environment.