Data types

Discover the data types supported by Vault

Vault provides standard, personal information, financial information, and identifier semantic data types.

Standard types

Name	Description	Validation	Normalization
STRING	A string.	Must contain up to 64 characters.	Vault applies Unicode Normalization Form Composed (NFC) that, whenever possible, replaces sequences of code points with a single point.
LONG_TEXT	A string.	Vault applies no validation.	See STRING normalization.
JSON	A JSON string	Must comply with JSON RFC7159.	Vault guarantees that the normalized value is equivalent to the original value as a JSON object, but not necessarily as a string.
INTEGER	A 64-bit signed integer.	Must be larger or equal to −2^63 and smaller or equal to 2^63 − 1.	Vault applies no normalization.
BOOLEAN	A boolean value.	Must be true or false (lower case characters).	Vault applies no normalization.
DOUBLE	A 64-bit decimal floating-point number.	Must be a valid JSON number.	Vault may truncate values that cannot be represented accurately by this type.
BLOB	A base64 string. Can be used to store files (e.g. your customer's KYC files)	Must be a valid base64 string. The binary blob itself (before encoded to base64) should be up to 5MB (configurable).

Personal information types

Name	Description	Validation	Normalization
EMAIL	A string containing an email address.	Must comply with emailRegexString.	Applies RFC 2047 formatting and then deletes the "<" prefix and ">" suffix.
EMAIL_STRICT	A string containing an email address or its alias.	See EMAIL validation	See Strict Email normalization.
URL	A string containing an absolute URL (e.g., https://www.piiano.com/) or a relative URL (e.g., piiano.com).	Must comply with the BNF for specific URL schemes specification.	See URL normalization.
PHONE_NUMBER	A string of up to 15 digits with an optional leading '+'. Hyphens '-' may separate groups of digits in the string. For example, +1-123-4567890.	Must comply with E.164.	Vault removes all hyphens.
ZIP_CODE_US	A string containing 5 or 9 digits. For example, 12345, 42088-4542, or 42088 4542, or 420884542.	Must comply with ISO 3166-2:US, matching the regular expression ^\d{5}([\-]\d{4})$.	Vault applies no normalization.
TIMESTAMP	A string containing a date and time.	Must be in one of formats specified in Supported timestamp formats.	RFC 3339 with the ISO 8601 profile (using "T" separator and terminating with "Z" to indicate the GMT zone).
DATE	A string containing a date.	Must comply with ISO-8601 format, "YYYY-MM-DD".	Vault applies no normalization.
DATE_OF_BIRTH	A string containing a date.	See DATE validation.	See DATE normalization.
NAME	A string containing a name.	See STRING validation.	See STRING normalization.
GENDER	A string containing a gender.	See STRING validation.	See STRING normalization.
SSN	A string containing a US Social Security Number.	Must include 9 digits in three groups separated by spaces or hypens. For example, 444-21-4300 or 444 21 4300.	Normalizes to a 9-digit string in this format: ddd-dd-dddd where d is a single digit.
ADDRESS	A string containing an address.	See LONG_TEXT validation.	See LONG_TEXT normalization.

Financial information types

Name	Description	Validation	Normalization
BAN	A bank account number.	Must contain 5 – 17 digits.	Vault applies no normalization.
CC_HOLDER_NAME	A credit card holder name.	See STRING validation.	See STRING normalization.
CC_NUMBER	A credit card number with optional separators (hyphens and spaces).	Must contain from 13 to 19 digits. Separators must be single. The number must pass the Luhn checksum validation.	Vault removes all spaces and hyphens.
CC_EXPIRATION_STRING	A credit card expiration month and year.	Must match the MM/YYYY or MM/YY format.	Vault applies no normalization.
CC_CVV	A credit card verification value.	Must contain 3 or 4 digits only.	Vault applies no normalization.
US_BANK_ROUTING	A US bank routing number. See Routing Number and How to Arrange a Routing Number.	A string complying with the regular expression ^(([0-9]{9})|([0-9]{4}/[0-9]{4})|(([0-9]{2})-([0-9]{4})/([0-9]{4})))$.	Vault applies no normalization.
US_BANK_ACCOUNT_NUMBER	A US bank account number.	Must include at least one character from the a-z, A-Z, 0-9 character set.	Vault applies no normalization.

Identifier types

Name	Description	Validation	Normalization
OBJECT_ID	A unique ID complying with RFC 4122 Section 3	Must comply with RFC 4122 Section 3 and may contain mixed case characters.	Convert all characters to lower case.
TENANT_ID	An ID of a tenant.	A string of up to 64 characters.	See STRING normalization.

Reference

Strict email normalization

Email addresses are composed of user and domain names separated by the "@" character. For the STRICT_EMAIL type Vault supports domain-specific email address normalization with independent normalization of user and domain names. The following normalizations are implemented for the specified email providers:

Provider	Provider's identification	User name normalization	Domain name normalization	Example
Google	googlemail.com, gmail.com	Convert all characters to lower case, remove all "."s, and remove all characters following the left-most "+", including "+".	@gmail.com.	John.Do.E+friends@googlemail.com -> johndoe@gmail.com
Apple	icloud.com	Convert all characters to lower case, and remove a subaddress (or plus address), if present.	None.	John.Doe+shopping@icloud.com -> john.doeshopping@icloud.com
Microsoft	hotmail.***, live.***, outlook.***	Convert all characters to lower case, and remove a subaddress (or plus address), if present.	None.	John.Doe+shopping@outlook.it -> john.doe@outlook.it
Yahoo	yahoo.***, ymail.com	Convert all characters to lower case, remove all "."s, and remove all "-"s.	None.	J.D-one-time-address@yahoo.com -> jdonetimeaddress@yahoo.com

URL normalization

Vault applies all following normalizations to values of type URL:

Normalization	Example
Converts the host name to lower case	http://HOST -> http://host
Converts the scheme to lower case	HTTP://host -> http://host
Converts escape characters to upper case	http://host/t%ef -> http://host/t%EF
Decodes unnecessary escapes	http://host/t%41 -> http://host/tA
Encodes necessary escapes	http://host/!"#$ -> http://host/%21%22#$
Removes the default port	http://host:80 -> http://host
Removes an empty query separator	http://host/path? -> http://host/path
Removes a trailing slash	http://host/path/ -> http://host/path
Removes dot segments	http://host/path/./a/b/../c -> http://host/path/a/c
Removes duplicate slashes	http://host/path//a///b -> http://host/path/a/b

note

The URL parameters of the URL are not changed.

Supported timestamp formats

A timestamp (date and time) must be provided in one of the following formats:

• UnixDate, Mon Jan 2 15:04:05 MST 2006 or Mon Jan 02 15:04:05 MST 2006
• ANSIC, Mon Jan 2 15:04:05 2006 or Mon Jan 02 15:04:05 2006
• RFC850, Monday, 02-Jan-06 15:04:05 MST
• RFC1123, Mon, 02 Jan 2006 15:04:05 MST
• RFC1123 with numeric zone, Mon, 02 Jan 2006 15:04:05 -0700
• RFC2822, 02 Jan 06 15:04 MST
• RFC2822 with numeric zone, 02 Jan 06 15:04 -0700

Vault also supports the following timestamp formats, which use the "T" prefix for time and the "Z" prefix for zone:

• ISO-8601 2006-01-02T15:04:05Z
• RFC3339 with the "T" separator, 2006-01-02T15:04:05+07:00 or 2006-01-02T15:04:05Z
• RFC3339Nano with the "T" separator, 2006-01-02T15:04:05.999999999-07:00 or 2006-01-02T15:04:05.999999999Z

note

A terminating "Z" indicates Greenwich Mean Time (GMT). Four optional digits instead of the "Z" indicate a time offset relative to GMT.