Stoplight Collection
The ALTR Managed - Stoplight default collection sorts sensitive data types into 3 sensitivity tiers – red, yellow, and green – and tags each classifier with its tier, so you can find and act on data by how sensitive it is rather than by individual data type. Each classifier detects one data type using the detection methods listed for it.
How the Stoplight Collection Matches
Section titled “How the Stoplight Collection Matches”Each classifier in the Stoplight collection combines its conditions with OR logic, so it matches a column when any one of its detection methods matches. A classifier can use these condition types:
- Regex conditions, which match when at least 50% of sampled values match the pattern. Stoplight classifiers reuse the patterns from the ALTR Managed Regex collection.
- Google DLP conditions, at a Likelihood Threshold of
LIKELY. - Amazon Comprehend conditions, at a Match Threshold of
0.5. - Snowflake Native conditions, at a Minimum confidence of
MEDIUM.
Which conditions evaluate depends on the data source and processing location of the classification job. A condition whose service doesn’t run in a job is treated as not evaluated rather than failing the job, so a classifier matches only through the detection methods that evaluate in that job. For example, a classifier whose only detection method is Snowflake Native matches only in Snowflake classification jobs. See Classification Processing Location.
On API Payloads
Section titled “On API Payloads”In AI Data Shield, Stoplight classifiers also match text in an API payload through their Regex, Google DLP, and Amazon Comprehend conditions. A classifier whose only detection method is Snowflake Native reads Snowflake’s classification of a column, so it doesn’t match AI Data Shield payloads. See API Payload Classification.
Tiers and Tags
Section titled “Tiers and Tags”Every Stoplight classifier name includes its tier, in the form ALTR Managed - Stoplight - <TIER> - <Type>, and every classifier carries a tier tag:
tier:red– data whose exposure carries direct financial, identity, health, or system-compromise risk, such as government identifiers, payment card data, health identifiers, and credentials.tier:yellow– personal identifiers and quasi-identifiers, such as names, contact details, and device identifiers, that carry lower risk alone.tier:green– data with low sensitivity alone, such as URLs, generic dates, and US place names.
Some classifiers also carry one or more regulation tags that name a regulation relevant to the data type: reg:pci for the Payment Card Industry Data Security Standard (PCI DSS), reg:hipaa for the Health Insurance Portability and Accountability Act (HIPAA), and reg:gdpr for the General Data Protection Regulation (GDPR).
Red Tier Classifiers
Section titled “Red Tier Classifiers”Red tier classifiers detect government identifiers, payment card and bank data, health identifiers, and credentials.
| Classifier | What it detects | Detection methods | Regulation tags |
|---|---|---|---|
| ALTR Managed - Stoplight - RED - National ID (Non-US) | Non-US national and government identity numbers, including Canada Social Insurance Numbers, UK National Insurance Numbers, Australia Tax File Numbers, India Aadhaar, PAN, NREGA, and voter numbers, France NIR, Germany taxpayer IDs, Spain NIF, Japan individual numbers, and UK Unique Taxpayer References. | Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - US SSN | US Social Security numbers. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - Credit Card (PAN + Track) | Credit and debit card primary account numbers (PANs), including magnetic stripe track data. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | reg:pci |
| ALTR Managed - Stoplight - RED - CVV / CVC | Card verification codes (CVV/CVC) as Amazon Comprehend detects them. | Amazon Comprehend | reg:pci |
| ALTR Managed - Stoplight - RED - Card Expiry | Credit and debit card expiration dates. | Amazon Comprehend | reg:pci |
| ALTR Managed - Stoplight - RED - Bank Account | Bank account numbers. | Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - Bank Routing Number | US bank routing numbers in American Bankers Association (ABA) and magnetic ink character recognition (MICR) formats. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - IBAN | International Bank Account Numbers. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - SWIFT / BIC Code | SWIFT Bank Identifier Codes (BICs). | Regex, Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - Passport | Passport numbers. | Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - Driver’s License | Driver’s license numbers. | Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - RED - ITIN | US Individual Taxpayer Identification Numbers (ITINs). | Regex, Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - EIN | US Employer Identification Numbers (EINs). | Google DLP | |
| ALTR Managed - Stoplight - RED - Health Insurance ID | National health service and health insurance numbers: UK National Health Service (NHS) numbers, Australia Medicare numbers, and Canada health numbers. | Google DLP, Amazon Comprehend | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - NPI Number | US National Provider Identifiers. | Regex, Google DLP | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - DEA Number | US Drug Enforcement Administration (DEA) registration numbers. | Google DLP | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - Medical Record Number | Medical record numbers. | Google DLP | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - ICD Code | International Classification of Diseases (ICD-9 and ICD-10) diagnosis codes. | Google DLP | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - Medical Term | Medical terminology. | Google DLP | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - RED - Password | Passwords. | Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - PIN | Personal identification numbers (PINs). | Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - AWS Credentials | AWS access keys, secret keys, and other AWS credential material. | Regex, Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - RED - GCP Credentials & API Keys | Google Cloud service account credentials and API keys. | Google DLP | |
| ALTR Managed - Stoplight - RED - Azure Auth Token | Azure authentication tokens. | Google DLP | |
| ALTR Managed - Stoplight - RED - JWT | JSON Web Tokens. | Regex, Google DLP | |
| ALTR Managed - Stoplight - RED - OAuth Client Secret | OAuth client secrets. | Google DLP | |
| ALTR Managed - Stoplight - RED - Encryption / Private Keys | Private key headers and encryption keys. | Regex, Google DLP | |
| ALTR Managed - Stoplight - RED - Ethnicity | Race and ethnicity references. | Google DLP, Snowflake Native | reg:gdpr |
Yellow Tier Classifiers
Section titled “Yellow Tier Classifiers”Yellow tier classifiers detect personal identifiers, contact details, and device identifiers.
| Classifier | What it detects | Detection methods | Regulation tags |
|---|---|---|---|
| ALTR Managed - Stoplight - YELLOW - Person Name | Full, first, and last names of people. | Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - YELLOW - Date of Birth | Dates of birth. | Google DLP, Snowflake Native | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - Street Address | Street addresses. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - YELLOW - Phone Number | Phone numbers. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - Email Address | Email addresses. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - YELLOW - IP Address | IPv4 and IPv6 addresses. | Regex, Google DLP, Amazon Comprehend, Snowflake Native | reg:hipaa, reg:gdpr |
| ALTR Managed - Stoplight - YELLOW - Postal Code | Postal and ZIP codes. | Regex, Snowflake Native | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - Vehicle Identification Number | Vehicle Identification Numbers (VINs). | Google DLP, Amazon Comprehend, Snowflake Native | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - License Plate | Vehicle registration and license plate numbers. | Regex, Amazon Comprehend | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - MAC Address | MAC addresses. | Regex, Google DLP, Amazon Comprehend | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - IMEI | International Mobile Equipment Identity (IMEI) device identifiers. | Google DLP, Snowflake Native | reg:hipaa |
| ALTR Managed - Stoplight - YELLOW - Username | Usernames. | Amazon Comprehend | |
| ALTR Managed - Stoplight - YELLOW - Age | Ages. | Google DLP, Amazon Comprehend, Snowflake Native | |
| ALTR Managed - Stoplight - YELLOW - Gender | Gender. | Google DLP, Snowflake Native | |
| ALTR Managed - Stoplight - YELLOW - HTTP Cookie | HTTP cookies and session tokens. | Google DLP | |
| ALTR Managed - Stoplight - YELLOW - Geolocation Lat Long | Latitude and longitude coordinates. | Snowflake Native | reg:hipaa |
Green Tier Classifiers
Section titled “Green Tier Classifiers”Green tier classifiers detect URLs, domain names, generic dates, and US place names.
| Classifier | What it detects | Detection methods | Regulation tags |
|---|---|---|---|
| ALTR Managed - Stoplight - GREEN - URL | URLs. | Regex, Amazon Comprehend | |
| ALTR Managed - Stoplight - GREEN - Domain Name | Domain names. | Google DLP | |
| ALTR Managed - Stoplight - GREEN - Generic Date/Time | Dates and timestamps other than dates of birth. | Regex, Google DLP, Amazon Comprehend | |
| ALTR Managed - Stoplight - GREEN - City | US city names. | Snowflake Native | |
| ALTR Managed - Stoplight - GREEN - State / Territory | US state and territory names. | Snowflake Native | |
| ALTR Managed - Stoplight - GREEN - County | US county names. | Snowflake Native | |
| ALTR Managed - Stoplight - GREEN - Year of Birth | Birth years without a month or day. | Snowflake Native |