Healthcare
- HIPAA
- UK GDPR
- NHS DSPT
Patient names, NHS, MRN and NPI numbers, insurance IDs and diagnoses.
Helps support regulated teams.
Detectors tuned to each field's sensitive data, policy templates and evidence your auditors can read. Every check still runs on your device.
Industries
Payments & retail
- PCI DSS
Card numbers (Luhn-checked), CVV, expiry and track data never reach a chat.
Banking & finance
- GLBA
- SOX
- FCA
Account, IBAN, SWIFT and routing numbers, loan and brokerage accounts.
Legal
- Privilege
- Client confidentiality
Privileged markings, client and matter names, contracts and term sheets.
Any EU / UK customer data
- GDPR
- UK GDPR
- CCPA
Emails, phone numbers, national IDs, passports, addresses and dates of birth.
Tech & government
- SOC 2
- ISO 27001
- CUI
API keys, cloud credentials, passwords, secrets and classification markings.
Example values on this page are fake. VeilGuard helps support these programs and policies. No single tool makes an organisation compliant on its own.
Evidence for auditors.
Each entry in the local evidence log carries the SHA-256 hash of the one before, so any edit or deletion breaks the chain. One click re-verifies it. Try it: change an entry below.
Tamper-evident evidence log
Hash-chained record of what was caught, kept on the device.
Monthly compliance report
Printable summary with PDF and CSV download, from the team console.
Forced redaction
Admins can require masking, so there is no "send anyway".
Company-wide policies
Console policies, Group Policy (ADMX), silent roll-out and Android Enterprise managed configuration.
Masked history
History and exports keep masked values, generated locally.
SIEM export
Counts to Splunk, Microsoft Sentinel or a signed webhook.
Review queue
Every "send anyway", block and forced redaction in one list to acknowledge, assign and resolve. Metadata only, never the text.
USB, print and labels
The Windows app can monitor, warn or block files copied to USB drives, print jobs and files with a Microsoft sensitivity label.
Demo entries, hashed in your browser with the Web Crypto API. Real logs stay on your device.
Policy templates, one click each.
- HIPAA
- PCI DSS
- GDPR
- Legal
- Financial services
- Strict
Team plans include templates in the company console that switch on the right packs, strictness and forced redaction for every linked browser, PC and phone.
Packs for the work you do.
Switch on the packs that match your work. Each adds detectors tuned to that field's sensitive data and scams, and still runs entirely on your device.
Finance & Accounting
Keeps payment, banking and payroll data out of prompts, and flags business-email-compromise lures.
BECWarns on "updated bank details" and urgent wire requests.
Healthcare & MedTech
Helps protect patient data, and supports privacy programs for medical staff with local evidence logs.
EvidenceA hash-chained record of what was caught, kept on the device.
Contracts & Legal
Spots privileged and confidential material before it's pasted into an AI tool.
Web3 & Crypto
Blocks fake exchanges and wallet look-alikes impersonating Coinbase, Binance, Kraken, OKX, Uniswap, OpenSea, MetaMask, Phantom and others.
BeforeRisky sites are checked before a wallet is ever connected.
Banking & Financial Services
For bank, broker and payments staff: card security codes, loan and brokerage accounts, SWIFT payment messages and KYC / AML case material.
Government & Public Sector
Stops classified and controlled material reaching public AI tools, and protects citizens' case and benefits data.
Military & Defence
For defence staff and contractors: allied markings, export-controlled technical data and operational details.
Education
Helps schools and universities keep student records out of AI tools, in line with programs such as FERPA and UK GDPR.
Insurance & HR
Policy and claim numbers, employee IDs, and HR matters such as disciplinary, grievance and termination cases.
Telecoms
Device and subscriber identifiers that support and engineering teams handle every day.
VeilGuard helps support data-protection and privacy programs. It does not by itself make an organisation compliant with any regulation or standard, and it isn't certified against any standard. Brand names identify impersonation targets only. See every pattern in the published detection rules.
Give your auditors something to read.
Pro and Team include the console, templates and the monthly compliance report. Enterprise adds custom detectors and packs.