Wheelhouse (Data protection) · Personal Data Detection

Personal data discovery without copying your data.

Find the personal data without reading it. Wheelhouse walks your data estate read-only, samples within limits you set, and checks each value with checksums built for Indian identifiers. The detector reports where personal data is, never what it says.

Runs in your cloud, on your premises, or air-gapped. No managed SaaS.

Last reviewed

Book a working session Watch it work

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
Copy the data out to scan it.Read-only, inside your boundary, with row ceilings enforced at the query.
Regex that calls every 12-digit number an Aadhaar.Verhoeff checksum for Aadhaar, grammar for PAN, checksum for GSTIN, Luhn for cards.
Matches returned as text.Only the entity, its position and a confidence; never the matched value.

The detector sits behind a process boundary with no credentials and no network, and returns only where an entity is, never the value.

Source: Wheelhouse architecture and detector

The record

The observation, on the record.

Every scan produces an observation receipt recording where personal data was found, never what the value was.

Observation 1,204 Estate scan · 03:14:22Z
Datastore
orders-db · customers
Column
mobile_number
Entity type
Indian mobile
Confidence
0.97 · Verhoeff valid
Matched value
Not returned
sha256 87496f2c2bf7de272f69328f565b290d…
entry 1,204 of 8,937 · write-once

The call path

Where the detector acts.

  1. ObserveRead-only collector samples each datastore
  2. DetermineChecksum and pattern matching per value, no network
  3. ActEntity type, position and confidence recorded
  4. SignObservation receipt, value never retained
  5. ProveWhere personal data is, not what it says

Also covered

  • Estate discovery
  • Indian identifiers
  • Checksum validation
  • Blast radius
  • Website crawler

Common questions

Answered straight.

Which databases?
Any database Trino fronts: Postgres, MySQL, Hive, Elasticsearch, OpenSearch, Iceberg and more, through one Trino connector.
What are the 13 identifier types?
Aadhaar, PAN, GSTIN, IFSC, UPI VPA, Indian mobile, email, payment card, Indian passport, voter ID, vehicle registration, IP address and date of birth.
Does anything leave our boundary?
No. No telemetry, no CDN, no error reporting. Air-gapped installs work fully.
Can you scan our website too?
Yes. A crawler records every third-party request and cookie your pages actually set.

Related

Know where it is. Never copy it.

Book a working session