Skip to content
AImori

Sources and licences

As of 18 October 2026. The detection rules – patterns and check digits – were written independently from public specifications; no third-party code was used for them. Third-party code is only part of the text recognition for images and of the local AI detection (see below).

On this page

Validation methods

General

MethodSource
Luhn (cards, Swiss health insurance card, IT VAT)ISO/IEC 7812-1 Annex B
ISO 7064 MOD 97-10 (IBAN, NL VAT from 2020, LEI)SWIFT IBAN Registry; ISO 13616; ISO 17442
IBAN lengths per countrySWIFT IBAN Registry (authoritative)
ICAO 7-3-1 (MRZ, DE ID card)ICAO Doc 9303 Part 3
Verhoeff (IN Aadhaar, LU Matricule)Verhoeff 1969; UIDAI Aadhaar specification
Formats of access keysPublic provider documentation (AWS, Microsoft, Google, GitHub, GitLab, Slack, Stripe, OpenAI, Anthropic, SendGrid)
Bitcoin (Base58Check, Bech32/Bech32m), EthereumBitcoin Wiki; BIP-173, BIP-350; EIP-55 (not checked)
IPv6, MAC addressRFC 4291, RFC 3849; IEEE 802 EUI-48
SHA-256 (company dictionary)FIPS 180-4

Switzerland, Germany, Austria

MethodSource
AHV number (EAN-13 mod 10)GS1; Swiss Central Compensation Office
CH UID (mod 11)Swiss Federal Statistical Office (UID register)
DE tax ID, DE VAT (ISO 7064 MOD 11,10)ISO/IEC 7064; German Federal Central Tax Office
DE pension insurance numberDeutsche Rentenversicherung
DE health insurance numberGKV-Spitzenverband, § 290 SGB V
AT social security number, AT VATUmbrella Association of Austrian Social Insurance; Austrian Ministry of Finance

Rest of Europe

MethodSource
FR NIR, TVAINSEE; DGFiP
IT codice fiscale, partita IVAAgenzia delle Entrate
BE national register, VATRijksregister / Registre national; FPS Finance
NL BSN (11-proef), BTWRijksoverheid; Belastingdienst
LU Matricule, TVACNS/RNPP; AED
ES DNI, NIE, CIF, NSSReal Decreto 1553/2005; Orden EHA/451/2008; TGSS
PT NIF, NISS, Cartão de CidadãoAutoridade Tributária; Segurança Social; AMA
IE PPS, VATRevenue Commissioners
GB NINO, NHS, UTR, VAT, driving licenceHMRC; NHS Data Dictionary; DVLA
SE, DK, NO, FI, ISSkatteverket, Bolagsverket; CPR-Kontoret, Erhvervsstyrelsen; Skatteetaten, Brønnøysundregistrene; DVV, PRH; Þjóðskrá
PL, CZ, SK, HU, RO, BG, HR, SI, GR, CY, MT, EE, LT, LVMSWiA, GUS; Zákon 133/2000 Sb.; Finanční správa; NAV, NEAK; DEPABD, ANAF; GRAO, NRA; Porezna uprava; Zakon o CRP, FURS; IDIKA, AADE; Tax Department CY; CFR; EVS 585:2007, EMTA; VMI; PMLP, VID
EHIC, EU driving licenceDecision S2 of the Administrative Commission; Directive 2006/126/EC

Americas

MethodSource
US SSN (format rules only)Social Security Administration
US ITIN, EIN, ABA, MBIIRS; ABA/Federal Reserve; CMS
CA SIN, BN, OHIPESDC; CRA; Ontario Ministry of Health
BR CPF, CNPJ (mod 11, including the alphanumeric CNPJ from July 2026)Receita Federal do Brasil; IN RFB 2.229/2024
BR CNS, phone, CEPMinistério da Saúde (DATASUS); Anatel; Correios
MX CURP, RFC; AR CUIT; CL RUT; CO NITRENAPO; SAT; AFIP; SII; DIAN

Asia, Oceania, Africa, Middle East

MethodSource
CN citizen ID (ISO 7064 MOD 11-2), USCC (mod 31)GB 11643-1999; GB 32100-2015
IN Aadhaar, PAN, GSTINUIDAI; Income Tax Department; CBIC
JP My Number, corporate numberCabinet order on the individual number; NTA
KR RRN, BRN; SG NRIC, UENMOIS, NTS; ICA, ACRA
AU TFN, Medicare, ABN; NZ IRD, NHIATO; Services Australia; ABR; Inland Revenue; Te Whatu Ora (HISO 10046)
ZA ID, TIN; TR TCKN, VKN; IL Teudat ZehutHome Affairs, SARS; Nüfus, GİB; Rashut HaOchlusin
AE Emirates ID; SA ID, Iqama; NG NIN, BVNICP; Absher; NIMC, NIBSS

The extension's tests only use officially published example values (e.g. the AHV example of the Central Compensation Office, IBAN examples of the SWIFT IBAN Registry, the ICAO specimen passport, Stripe test cards) or made-up values calculated according to the specification – never real data.

Bundled components

The extension is open source under the GNU AGPL v3 (source code on GitHub). It bundles these third-party components; their licence texts are included in the package:

ComponentLicenceUsed for
tesseract.js 7.0.0 with tesseract.js-core 7.0.0Apache-2.0; included libraries (Leptonica, libpng, libjpeg, libwebp, zlib) under their own licencesText recognition in images
Language data tessdata 4.0.0_best_int (deu, eng, fra, ita, por)Apache-2.0Text recognition in images
onnxruntime-web 1.30.0MITLocal AI detection
@huggingface/tokenizers 0.2.0Apache-2.0Local AI detection
Model bardsai/eu-pii-anonimization-multilang (based on XLM-RoBERTa)Apache-2.0 (XLM-RoBERTa: MIT)Local AI detection; vocabulary trimmed to 80,000 subwords, other weights unchanged
Space Grotesk and Geist fontsSIL Open Font License 1.1Extension interface

Used as information only

SourceLicenceUse
gitleaksMITList of providers and formats of access keys as orientation; patterns written independently from the provider documentation
ibantoolsMIT or MPL-2.0Table of IBAN lengths per country (facts; the SWIFT IBAN Registry is authoritative)
python-stdnumLGPL-2.1Only public example values from the documentation as test data and official source references; no code used
CyberDrain CheckAGPL-3.0Only concept and structure (policy schema, rollout folders, documentation layout); no code and no text used

trufflehog (AGPL-3.0) was deliberately not used.

This website

The website is written independently and loads nothing from third-party servers. Self-hosted and included unchanged are: the Space Grotesk and Geist fonts (SIL Open Font License 1.1), the 3D library three.js (MIT) and individual Lucide icons (ISC). The licence texts sit next to the files on the website (schriften/space-grotesk-OFL.txt, schriften/geist-OFL.txt, lizenzen/three.txt, lizenzen/lucide.txt). The AImori logo is an original drawing.

Free for Chrome