The TruePrivacy Device Agent scans files on employee endpoints for personal data. It answers the question data-discovery platforms exist for — where does personal data live in our organization? — but with a decisive difference: all processing is local. Files are read, matched, and scored on the device. No file contents, findings, or excerpts are ever transmitted.
TruePrivacy device agent home screen

​
Detection rules

The agent ships with 40+ detection rules organized into rule packs, with Europe/GDPR coverage first:
Identifiers relevant to GDPR and UK GDPR compliance across European jurisdictions:
  • European Union — VAT numbers, IBAN bank account numbers
  • France — INSEE numbers
  • Spain — DNI
  • Germany — Tax ID (Steuer-ID)
  • United Kingdom — NINO (National Insurance Number), NHS numbers
Universal identifiers found in every jurisdiction: email addresses and credit card numbers (with Luhn validation).
Identifiers relevant to India’s Digital Personal Data Protection Act: Aadhaar numbers, PAN (Permanent Account Number), and related Indian identity and financial identifiers.
US-specific identifiers: SSN, ITIN, passport numbers, bank routing (ABA) numbers, and phone numbers.
Additional contextual detectors that extend the core packs with broader identity, medical, and contact patterns.
Each finding carries a confidence score based on pattern strength, checksum validation, and surrounding context. You control which entities are active via the PII Types tab.

​
Local-only by design

  • Scanning, matching, and scoring run entirely on-device.
  • Findings are stored in a local database on the endpoint.
  • Detected values are masked in the UI — full values are never displayed or exported in clear text.
  • Backend enrollment is optional and used only for licensing and device management; see Installation.
Because processing is local, the agent works fully offline — on air-gapped machines, in restricted networks, and for organizations whose policies prohibit uploading file contents to any cloud service.

​
Capabilities at a glance

Installation & licensing

macOS and Windows installers, optional enrollment, cryptographically signed offline licenses.

Scanning

Choose folders, run/pause/resume, schedule recurring scans.

PII types

Enable or disable individual entities per scan policy.

Archive scanning

Scan inside ZIP, TAR, GZIP, and BZIP2 archives with safety limits.