Veil 1.5 coverage
What Veil can protect today
A versioned view of the browsers, text surfaces and sensitive-data families covered by Veil 1.5—and the places where you should not expect protection.
Last reviewed: 8 August 2026 · Detection assists judgment and can produce false positives or false negatives.
Where protection runs
Browsers
Google Chrome and Microsoft Edge desktop extensions. Firefox, Safari and native desktop or mobile applications are not part of 1.5.
Text interactions
Typing, paste and explicit text selection in supported standard inputs, text areas and compatible rich-text editors.
Local decision
Detection and the protect/mask decision run in the browser. Context, confidence and managed policy can change whether Veil stays quiet, suggests or blocks.
Supported workplace AI protection
Veil 1.5 has dedicated prompt adapters for ChatGPT, Claude, Google Gemini, Microsoft Copilot and Perplexity in Chrome and Microsoft Edge. A visible Veil status identifies when the current supported AI editor is protected.
Prompt text
Typing and submission are evaluated locally. Personal protection can explain and sanitize; Business policy can allow, warn, mask or block by detected category.
File actions
Veil does not read file contents in 1.5. It can require review or apply an organisation's block before a file is shared with a supported AI site.
Administrative evidence
Business evidence records the category, destination and outcome—not the sensitive prompt or file details.
Sensitive-data families
| Family | 1.5 coverage | Important boundary |
|---|---|---|
| Credentials and secrets | API keys, JSON Web Tokens, private-key blocks, database connection strings and context-supported passwords | Provider-specific or newly introduced secret formats may require a detector update. |
| Payments and banking | Payment-card numbers, IBAN, routing numbers, SWIFT/BIC codes and labelled bank-account numbers | IBAN covers all 89 countries in SWIFT Registry release 102; other bank formats vary by country and context. |
| Contact and identity context | Email addresses, phone numbers and labelled dates of birth | Veil may deliberately stay quiet in an expected destination field, such as an email-address box. |
| Government and tax identifiers | Structured national, social-insurance and tax identifiers listed below, plus labelled passport and driver-licence values | This is a maintained set, not a claim to every identifier or document format worldwide. |
| Health and business records | UK NHS, Australian Medicare, labelled medical-record numbers, customer IDs and internal references | Unlabelled organization-specific formats may be indistinguishable from ordinary text. |
Structured national and regional formats
Veil 1.5 has explicit handling for the following formats. Many use official checksums, range rules or required context to reduce unnecessary interruptions.
Europe
- Ireland PPS number
- United Kingdom National Insurance and NHS numbers
- France NIR / social-security number
- Netherlands BSN
- Germany Steuer-ID
- Sweden personnummer
- Norway fødselsnummer
- Denmark CPR
- Belgium national-register number
Americas and Africa
- United States SSN and ITIN
- Canada SIN
- Brazil CPF
- Mexico CURP
- South Africa identity number
Asia-Pacific
- Australia TFN and Medicare
- India Aadhaar
- Singapore NRIC / FIN
- Hong Kong identity card
- New Zealand IRD number
- Japan My Number
- South Korea resident-registration number
- Taiwan national identity number
Formatting support includes relevant compact, spaced and common separator forms. Some values require a recognizable label or field context to avoid treating ordinary numbers as sensitive.
Known 1.5 limitations
- Files and media: Veil 1.5 does not inspect the contents of uploads, attachments, PDFs, Office documents, archives, images, screenshots, scans, audio or video. The supported-AI upload gate warns or blocks before sharing; it is not document inspection.
- Custom editors: canvas-rendered editors, remote desktops, protected browser surfaces and heavily customized components may not expose replaceable text to an extension.
- Platforms: protection does not extend into native desktop/mobile applications, mobile browsers, Firefox or Safari in 1.5.
- Languages and formats: not every national identifier, native-numeral system, local label, spelling or newly issued format is covered.
- After reveal: once a person intentionally reveals, copies or sends plaintext, Veil cannot control every downstream application, recipient or clipboard.
- No absolute guarantee: a warning does not prove data is sensitive, and the absence of a warning does not prove content is safe.
Found a missing or incorrect format?
Report the country, identifier name, way it was written and whether Veil stayed quiet or interrupted unnecessarily. Use synthetic examples only—never submit a real identifier.