pii.email_address
An email address appears in the free text.
What it looks at#
A regex over the text for the standard local-part@domain shape. It doesn’t verify the
address exists or is deliverable — that’s /v1/emails’ job, on a
single address field, not free-text scanning.
Why it matters#
An email address is personal data whether it arrives as a dedicated field or embedded in a support ticket, a comment, or a pasted log. Low severity because it’s also the single most common and often unremarkable piece of contact information a person shares voluntarily — this check exists so you know it’s there, not to imply anything adversarial.
What to do#
Low severity — expected in plenty of legitimate text (a support message signed with an
email, a forwarded thread). Use redact: "mask" before storing or forwarding text you
don’t need the raw address in.