About Docually

Docually is a compliance document sanitization engine. It scans documents for personally identifiable information and tells you which regulation clause applies to each finding.

Detection vs. Compliance

Most PII tools stop at detection. They find a Social Security Number and say "SSN found." That's necessary but insufficient — the question isn't whether PII exists, but what you're required to do about it under which law.

Docually maps each finding to the specific clauses that govern it. An SSN triggers HIPAA Safe Harbor §164.514(b)(2)(i)(A) — one of 18 identifiers that must be removed for de-identification. It triggers CCPA §1798.140(v)(1)(A) — explicitly listed as personal information. It triggers GDPR Art. 87 — national identification numbers subject to member-state safeguards.

This regulation-to-finding mapping is the difference between knowing you have a problem and knowing which laws require you to fix it.

Privacy by Architecture

Docually runs entirely in your browser. There is no server processing, no API call, no cloud upload. The scanner engine, validation algorithms (Luhn, SSN area-number rules, VIN check digits), and regulation database are embedded in the page JavaScript.

This isn't a privacy feature bolted onto a server-side architecture — it's a design constraint. A PII scanning tool that uploads your documents to scan them has a fundamental conflict: it asks you to expose the data you're trying to protect. Docually avoids this entirely.

You can verify this in your browser's network inspector. Paste a document, scan it, and confirm: zero network requests are made during analysis.

What Docually Scans

13 PII pattern types, each with format validation and regulation mapping:

• Identifiers: Social Security Numbers (area validation), dates of birth, US passport numbers, driver's license numbers
• Financial: Credit/debit cards (Luhn algorithm), IBANs, Employer Identification Numbers
• Contact: Email addresses, US phone numbers, US street addresses
• Health: Medicare Beneficiary Identifiers (MBI, post-2020 format)
• Digital: IPv4 addresses (octet validation)
• Vehicle: VINs (ISO 3779 check-digit validation)

Limitations

Docually uses regex-based pattern matching with algorithmic validation. This approach provides high precision (few false positives) but limited recall for certain data types. Unstructured names, contextual identifiers, photographs, biometric data, and non-standard formats may not be detected.

Docually is a scanning tool, not a compliance certification. Use it as one step in your compliance workflow alongside qualified legal counsel and compliance professionals.

Contact

Questions, corrections, or partnership inquiries — reach us through our contact form. We read and respond to everything.