Trend Micro Incorporated reserves the right to make changes to thisdocument and to the product described herein without notice. Before
installing and using the product, review the readme files, release notes,
and/or the latest version of the applicable documentation, which areavailable from the Trend Micro website at:
http://docs.trendmicro.com
Trend Micro, the Trend Micro t-ball logo, and OfficeScan are trademarks orregistered trademarks of Trend Micro Incorporated. All other product orcompany names may be trademarks or registered trademarks of theirowners.
Copyright © 2019. Trend Micro Incorporated. All rights reserved.
Document Part No.: LPEM78668/190509
Release Date: 2019
Protected by U.S. Patent No.: Patents pending.

This documentation introduces the main features of the product and/or
provides installation instructions for a production environment. Readthrough the documentation before installing or using the product.
Detailed information about how to use specific features within the productmay be available at the Trend Micro Online Help Center and/or the Trend
Micro Knowledge Base.
Trend Micro always seeks to improve its documentation. If you havequestions, comments, or suggestions about this or any Trend Microdocument, please contact us at docs@trendmicro.com.
Evaluate this documentation on the following site:
http://www.trendmicro.com/download/documentation/rating.asp

Table of Contents
Chapter 1: Data Loss Prevention - Predefined Data Identifiers
and Templates
Predefined Expressions ....................................................... 1-2
Recognized File Types ....................................................... 1-58
Predefined Keyword Lists .................................................. 1-61
Predefined Templates ........................................................ 1-65

Chapter 2: Data Loss Prevention - Supported Applications
Cloud Storage Applications .................................................. 2-2
Data Recorders ................................................................... 2-2
Email Clients ...................................................................... 2-4
FTP .................................................................................... 2-5
HTTP and HTTPS ............................................................... 2-6
IM Applications .................................................................. 2-8
Peer-to-Peer Applications .................................................... 2-9
PGP Encryption ................................................................ 2-10
Printer ............................................................................. 2-10
Removable Storage ............................................................ 2-11
SMB Protocol .................................................................... 2-14
Synchronization Software (ActiveSync) ............................... 2-17
Webmail ........................................................................... 2-18

Chapter 3: Device Control - Supported Device Models
Supported Device Models .................................................... 3-2
Obtaining the Support Properties for a Device ...................... 3-6iTrend Micro Data Protection Lists

Disclaimer
Disclaimer ............................................................................. i

Index
Index ............................................................................... IN-3

ii

Chapter 1

Data Loss Prevention - Predefined Data
Identifiers and Templates•

Predefined Expressions on page 1-2•

Recognized File Types on page 1-58•

Predefined Keyword Lists on page 1-61•

Predefined Templates on page 1-65

1-1

Trend Micro Data Protection Lists

Predefined Expressions
Trend Micro products provide the following predefined expressions:
Name
All: Credit Card
Number

1-2•

Description

Validator

Credit card
numbers

Credit Card
NumberAdditional
Verification

Predefined
Template•

NumberprefixSame name•

LUHN
checksum

All: Email
Address•

Emailaddresses

NotapplicableNot applicable

All: IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

All: IIN (Issuer
Identification
Number)•Also known as
BIN (bankidentification
number) andISO/IEC 7812

BINNumber

Not applicable•Aninternational
standard thatspecifies a
numberingsystem for theidentificationof a card
issuerNot applicable
Same nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

All: IMEI(International
MobileEquipment
Identity)•Aninternational
standard for
uniquely
identifying
mobilephones or
smartphones•

LUHN
checksum

All: Names from
US Census
Bureau•Names fromthe US Census
Bureau (up to
the year 1990)

US: Namesfrom Census
BureauNot applicable•

Case-sensitive

Predefined
Template
Same nameSame name1-3

Trend Micro Data Protection Lists

Name
All: SWIFT BIC(SWIFT Business
Identifier Code)

All: Time zone
offset1-4

Description•

Also known as
ISO 9362, BIC
code, SWIFT
ID, and SWIFT
code•

A standard
format ofbusiness
identifier
codes
approved bytheInternational
Organization
forStandardizati
on (ISO)•

Used byfinancial
institutions
and other
entities intransactions
such asmoney
transfers•

An amount oftime added toor subtracted
from thestandard
twenty-fourtime zones.

Additional
Verification

Validator
SWIFT BIC
(SWIFT
Business
Identifier
Code)Time zone
offset•Country code•

Case-sensitive

Not applicable

Predefined
Template
Same nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Albania: IBAN
(International
Bank AccountNumber)•Andorra: IBAN
(International
Bank AccountNumber)•Australia: TFN(Tax File
Number)Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used
primarily fortax purposes,
but also usedintransactions
withgovernment
agencies andprivateentities

Australia: Tax
File Number•

Expressionspecificchecksum•Issued by theAustralian
Taxation
Office tocitizens andorganizations

Predefined
Template
Same nameSame nameSame name1-5

Trend Micro Data Protection Lists

Name

1-6

Description

Austria: IBAN
(International
Bank AccountNumber)•Austria: Phone
NumberAdditional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

•

Phone
number usedin Austria

Austria: Phone
NumberNot applicable

Austria: SSN Sozialversicheru
ngsnummer(Social Security
Number)•Used intransactions
withgovernment
agencies andprivateentities

Austria: Social
Security
Number•ExpressionspecificchecksumSame name

Azerbaijan: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Bahrain: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Not applicable

Same nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Belgium: IBAN
(International
Bank AccountNumber)•Belgium:
National
Registry Number

Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used as anational ID
number•Birth dateembedded in
the number•

Issued by the
National
Register tocitizens

Belgium:
National
Registry
Number•Expressionspecificchecksum

Belgium: Phone
Number•Phone
number used
in Belgium

Belgium:
Phone
NumberNot applicable

Bosnia andHerzegovina:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Predefined
Template
Same nameSame nameNot applicable

Same name1-7

Trend Micro Data Protection Lists

Name

1-8

Additional
Verification

Description

Validator
Bosnia andHerzegovina:
Unique MasterCitizen
Number•Birth dateembedded in
the number•

Expressionspecificchecksum

Brazil:National
Registry of
Legal Entities•

Expressionspecificchecksum

Bosnia andHerzegovina:
JMBG Jedinstvenimatični brojgrađana (Unique
Master Citizen
Number)•Used as anational ID
number•Issued by theformerYugoslav
republics tocitizens,
which Bosnia
andHerzegovina
continued touse after its
independence

Brazil: CNPJ Cadastro
Nacional da
Pessoa Jurídica
(National
Registry of Legal
Entities)

An identification
number issued toBraziliancompanies by the
Secretariat of theFederal Revenue ofBrazilPredefined
Template
Same nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Additional
Verification

Predefined
Template•

ExpressionspecificchecksumSame name

IBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Bulgaria:
Uniform Civil
Number•Birth dateembedded in
the number•

Expressionspecificchecksum

Description

Validator•

Used
primarily fortax purposes,
but also usedintransactions
withgovernment
agencies andprivateentities

Brazil: Natural
Persons
Register•Issued by theFederal
Revenue tocitizens andresident
foreignnationals

British Virgin
Islands: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsBulgaria: EGN Edinen
Grashdanski
Nomer (Uniform
Civil Number)•

Used inadministrative, health, andbankingsystems

Brazil: CPF Cadastro dePessoas Físicas(Natural Persons
Register)•Issued by
district offices
to citizens andpermanent
residents

Same name1-9

Trend Micro Data Protection Lists

Name

1-10

Description

Bulgaria: IBAN
(International
Bank AccountNumber)•Bulgaria: Phone
NumberAdditional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

•

Phone
number usedin Bulgaria

Bulgaria:
Phone
NumberNot applicable

Canada: RAMQ Régie del'assurance
maladie duQuébec (Quebec
Health Insurance
Number)•Issued tocitizens andresidents
eligible for theQuebecHealthInsurance
Plan

Canada:Quebec RAMQ•

Expressionspecificchecksum•Case-sensitive

Canada: SIN(Social Insurance
Number)•Used in tax
reporting,banktransactions,andadministratio
n ofgovernment
programs

Canada:SocialInsurance
Number•Numberprefix•

LUHN
checksum

China: Bank
Account Number•

Used toidentify thebank accountof anindividual ororganizationin China

China: Bank
Account
NumberNot applicable

Predefined
Template
Same nameNot applicable

Same nameSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

China: Mobile
Phone Number•

Mobile phone
number usedin China

China: Mobile
Phone
NumberNot applicable

China: National
Identification
Number•Used bycitizens inaccessingpublic andprivateservices

China:
National
Identification
Number•Birth dateembedded in
the number•

Expressionspecificchecksum

Predefined
Template
Same nameSame name

China: Phone
Number•Phone
number usedin ChinaNot
applicableNot applicable

Same name

China: UnionPay
Card Number•

Used toidentify aUnionPay
account
holder's debit
or credit card

China:
UnionPay
Card Number•

ExpressionspecificchecksumSame nameCosta Rica: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

1-11

Trend Micro Data Protection Lists

Name
Croatia: IBAN
(International
Bank AccountNumber)•Croatia: MBG Matični brojgrađana (Unique
Master Citizen
Number)•Croatia: OIB Osobni
identifikacijski
broj (Personal
Identification
Number)

1-12

Description

Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Used intransactions
withgovernment
agencies

Croatia:
Unique MasterCitizen
Number•Birth dateembedded in
the number•

Expressionspecificchecksum•

Expressionspecificchecksum•Issued by theformerYugoslav
republics tocitizens,
which Croatia
continued touse after its
independence•

Replacement
for the Unique
Master Citizen
Number•Used intransactions
withgovernment
agencies andprivateentities

Croatia:
Personal
Identification
NumberPredefined
Template
Same nameSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

Predefined
Template

Croatia: Phone
Number•Phone
number usedin Croatia

Croatia:
Phone
NumberNot applicableNot applicable

Cyprus: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Cyprus: Phone
Number•Phone
number usedin Cyprus

Cyprus: Phone
NumberNot applicableNot applicable

Cyprus: TIN (Tax
Identification
Number)Used intransactions withgovernment
agencies andprivate entities

None

Not applicableNot applicable

Czech Republic:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Czech Republic:
Phone Number

•

Phone
number usedin Czech
Republic

Czech
Republic:
Phone
NumberNot applicable

Same nameSame nameNot applicable

1-13Trend Micro Data Protection Lists

Name
Czech Republic:
RC - Rodne Cislo(Birth Number)

Date: Full (day/month/year)

1-14

Description•

Usedprimarily forsocial security
andhealthcare
purposes, butalso used
when filingtaxes andseeking
employment•

Issued by the
Ministry of theInterior to
citizens andresident
foreignnationals•

Date format
commonlyused in the
UnitedKingdom•

dd/mm/yy or ddmm-yy•

dd/mm/
yyyy ordd-mmyyyy

Additional
Verification

Validator
Czech
Republic:
Birth Number

Date (daymonth-year)•

Birth dateembedded in
the number•

Expressionspecificchecksum•Month range•

Day range•

Year earlier
than 2051

Predefined
Template
Same nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and TemplatesName
Date: Full(month/day/year)

Date: Full (year/
month/day)

Date: Partial(month/year)

•

•

•

Description

Validator

Date format
commonlyused in the
United States

Date (monthday-year)•

mm/dd/yy or mmdd-yy•

mm/dd/
yyyy ormm-ddyyyy

Date format
defined by theInternational
Organization
forStandardizati
on (ISO)•yy/mm/dd or yymm-dd•

yyyy/mm/dd oryyyymm-dd

Date format
that specifies
only themonth and
year
•

mm/yy

•

mm/yyyy

Date (yearmonth-day)Not
applicable

Additional
Verification

Predefined
Template•Month range

Not applicable•Day range•

Year earlier
than 2051•

Month range•

Day range•

Year earlier
than 2051

Not applicableNot applicableNot applicable

1-15

Trend Micro Data Protection Lists

Name
Denmark: CPRnummer(Personal
Identification
Number)

1-16

Description•

Also known aspersonnumm
er•Used intransactions
withgovernment
agencies andprivatefinancial
institutions

Denmark: IBAN
(International
Bank AccountNumber)•Denmark: Phone
NumberDominican
Republic: CIE Cédula deIdentidad yElectoral(Personal
Identification
Number)Validator

Additional
Verification

Predefined
Template

Denmark:
Personal
Identification
Number•ExpressionspecificchecksumSame nameAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

•

Phone
number usedin Denmark

Denmark:
Phone
NumberNot applicable•

Used intransactions
withgovernment
agencies andprivateentities

Dominican
Republic:
Personal
Identification
Number•Expressionspecificchecksum

Not applicable

Same nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Dominican
Republic: IBAN
(International
Bank AccountNumber)•Estonia: IBAN
(International
Bank AccountNumber)•Estonia: IK Isikukood(Personal
Identification
Code)

•

Estonia: Phone
Number••Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Used as anational ID
numberEstonia:
Personal
Identification
Code•

Gender digit•

Birth dateembedded in
the number•

ExpressionspecificchecksumIssued by the
Ministry ofInternal
Affairs tocitizens andresident
foreignnationals
Phone
number usedin Estonia

Estonia:
Phone
NumberNot applicable

Predefined
Template
Same nameSame nameSame nameNot applicable

1-17Trend Micro Data Protection Lists

Name

1-18

Description

Validator

Additional
Verification

Predefined
Template

Finland: HETU Henkilötunnus(Personal
Identity Code)•

Used intransactions
withgovernment
agencies andprivateentities

Finland:
Personal
Identity Code•ExpressionspecificchecksumSame name

Finland: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Finland: Phone
Number•Phone
number usedin Finland

Finland:Phone
NumberNot applicableFrance: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Not applicable

Same nameData Loss Prevention - Predefined Data Identifiers and Templates

NameFrance: Les
Codes INSEE Institut Nationalde la Statistiqueet des Études
Économiques(INSEE Code)Description•

The numericalindexing codeused by the
FrenchNational
Institute for
Statistics andEconomic
Studies(INSEE)•

Used toidentify
entities•

Functions as anational ID
numberFrance: NIR Numérod'Inscription au
Repertoire(Social Security
Number)•Also known as
National
Registration
Number•Used in theadministratio
n of thenational
insurance orsocial security
systemFrance: Phone
Number•Phone
number used
in France

Validator

Additional
Verification

Predefined
Template

ExpressionspecificchecksumSame name

France: INSEE
Code

•

Not
applicableNot applicable

Same name

None

Not applicableNot applicable

1-19Trend Micro Data Protection Lists

Name

1-20

Description

Georgia: IBAN
(International
Bank AccountNumber)•Germany: IBAN
(International
Bank AccountNumber)•Germany: Phone
Number•Germany: SN Steuernummer(Tax
Identification
Number)•Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Phone
number usedin Germany

Germany:
Phone
Number•Area Code•The
maximum
total length ofArea Codeand
Subscriber
Number is 12

Issued by theGerman tax
administrationGermany: Tax
Identification
Number•Birth monthand day•

Expressionspecificchecksum•Case-sensitive

Predefined
Template
Same nameSame nameSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Gibraltar: IBAN
(International
Bank AccountNumber)•Greece: IBAN
(International
Bank AccountNumber)•Greece: Phone
Number•Greece: TIN - Tax
Identification
NumberUsed intransactions withgovernment
agencies andprivate entities

Greenland: IBAN
(International
Bank AccountNumber)•Additional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Phone
number usedin Greece

Greece: Phone
NumberNot applicableNot applicableNone

Not applicableNot applicable

IBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsSame nameSame nameSame name1-21

Trend Micro Data Protection Lists

Name

1-22

Description

Guatemala: IBAN
(International
Bank AccountNumber)•Hong Kong:
Identity Card
Number•Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Used
primarily for
identification
purposes; also
used intransactions
withgovernment
agencies andprivateentities

Hong Kong:
Identity Card
Number•Expressionspecificchecksum•Case-sensitive•

Issued by theRegistrationof Persons
Office toresidents

Hungary: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Hungary: Phone
Number•Phone
number usedin Hungary

Hungary:
Phone
NumberNot applicable

Predefined
Template
Same nameSame nameSame nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Name
Hungary:
Szemelyi Szam
(Personal
Identification
Number)•Description

Validator

Issued tocitizens andresident
foreignnationals

Hungary:
Personal
Identification
NumberAdditional
Verification

Predefined
Template•

NumberprefixSame name•Birth dateembedded in
the number•

Expressionspecificchecksum•

Abolished in
1991; rarely
used today

Iceland: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

India: Aadhaar(Unique
Identification
Number)•Used as anational ID
numberIndia: Unique
Identification
Number•Expressionspecificchecksum•Issued by the
UniqueIdentification
Authority ofIndia tocitizens andresident
foreignnationals

India: Mobile
Phone Number•

Mobile phone
number usedin India

India: Mobile
Phone
NumberNot applicable

Same nameSame nameSame name1-23

Trend Micro Data Protection Lists

Name

Predefined
Template

Validator•

Used
primarily fortax purposes;
also used infinancialtransactions

India: PAN Permanent
Account
Number••Issued by the
Income Tax
Department
to citizens andresident
foreignnationals•

Appears in
passports
issued tocitizens

India:
Passport
NumberNot applicable

Same name•

Used intransactions
withgovernment
agencies andprivateentities

India: Phone
Number•Phone
number usedin India

India: Phone
NumberNot applicable

Same nameIndia: PIN Postal Index
Number•Also known as
PincodeIndia: Postal
Index Number

Not applicable

Same name•

Postal code
number usedin India

India: PAN Permanent
Account Number

India: Passport
Number1-24

Additional
Verification

Description

Case sensitive

Same nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

India: Vehicle
Registration
Number•Issued by the
district-level
Regional
Transport
Office (RTO) to
all motorizedroad vehicles

India: Vehicle
Registration
NumberNot applicable

Ireland: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Ireland: Phone
Number•Phone
number usedin Ireland

Ireland:Phone
NumberNot applicable

Ireland: PPSN
(Personal PublicService Number)•

Used inaccessingsocial welfare
benefits,
publicservices, andinformation

Ireland:
Personal
Public Service
Number•Expressionspecificchecksum•Case-sensitive

Used for value
added tax
purposesNot
applicableNot applicable

Ireland: VAT(Value Added Tax
Number)•Predefined
Template
Same nameSame nameNot applicable

Same nameSame name1-25

Trend Micro Data Protection Lists

Name

Description

Israel: IBAN
(International
Bank AccountNumber)•Israel: National
Identidy Number

Issued topermanent andtemporaryresidents

Italy: CF - Codice
Fiscale (Tax
Code)

•

•

1-26

An
international
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsUsedprimarily fortax purposes,
but also usedintransactions
withgovernment
agencies andprivateentities
Issued by the
Italian
Revenue
Agency tocitizens andresident
foreignnationals

Additional
Verification

Validator

Predefined
Template

IBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

LUHN
checksum

Not applicable

Same name

Italy: CF –Codice Fiscale(Tax Code)•

Numberprefix

Italy: Fiscal
Code•

Expressionspecificchecksum•

Case sensitive

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Italy: IBAN
(International
Bank AccountNumber)•Italy: Phone
NumberAdditional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case sensitive

•

Phone
number usedin Italy

Italy: Phone
NumberNot applicableNot applicable

Japan: Address•

Address inJapan(prefecture,ward, city,
county, block,building
name, andnumber)Not
applicableNot applicableNot applicable

Japan: Date•

Date formats
commonlyused in JapanNot
applicableNot applicableNot applicable

Japan Driver
LicenseNumberCase-sensitive

Same name

Japan: Driving
License Number•

yyyy/mm/dd•

yy/mm/d•yy.mm.dd•yy.m.d•yyyy-m-d

A permit allowing
individuals to
operate motor
vehicles in Japan

Same name1-27

Trend Micro Data Protection Lists

Name

Description

Validator

Additional
Verification

Predefined
Template

Japan: Email
Address•

Emailaddresses
commonlyused in JapanNot
applicableNot applicableNot applicable

Japan: My
Number Corporate
Number: Central
governmentorganizations

Social security andtax number (MyNumber) for
centralgovernmentorganizations inJapan

Japan: My
Number Corporate
NumberExpression-specificchecksum

My Number Corporate
Number:Centralgovernmentorganizations(Match 10)
Templaterenamed withmatch rules

Japan: My
Number Corporate
Number: Local
governmentswith Community
Identification
NumberSocial security andtax number (MyNumber) for local
governments with
Community
Identification
Number in Japan

Japan: My
Number Corporate
NumberExpression-specificchecksum

My Number Corporate
Number: Local
governments
withCommunity
Identification
Number(Match 10)
Templaterenamed withmatch rules

1-28Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Japan: My
Number Corporate
Number: Local
governments
without
Community
Identification
NumberSocial security andtax number (MyNumber) for local
governments
without
Community
Identification
Number in Japan

Validator
Japan: My
Number Corporate
NumberAdditional
Verification

Predefined
Template

Expression-specificchecksum

My Number Corporate
Number: Local
governments
without
Community
Identification
Number(Match 10)
Templaterenamed withmatch rules

Japan: My
Number Corporate
Number:Registeredcorporations

Social security andtax number (MyNumber) for
registeredcorporations
established in
Japan

Japan: My
Number Corporate
NumberExpression-specificchecksum

My Number Corporate
Number:Registeredcorporations(Match 10)
Templaterenamed withmatch rules

1-29Trend Micro Data Protection Lists

Name

Description

Japan: My
Number Corporate
Number:Unregisteredcorporations andassociations
without legal
personality

Social security andtax number (MyNumber) for
unregisteredcorporations,
incorporated
associations
without legal
personality, andfoundations
without legal
personality inJapan

Validator
Japan: My
Number Corporate
NumberAdditional
Verification

Predefined
Template

Expression-specificchecksum

My Number Corporate
Number:Unregisteredcorporations,
incorporated
associations
without legal
personality,
andfoundations
without legal
personality(Match 10)
Templaterenamed withmatch rules

1-30Data Loss Prevention - Predefined Data Identifiers and Templates

NameJapan: My
Number Individual
NumberDescription
Social security andtax number (MyNumber) for
individuals in
Japan

Validator
Japan: My
Number Individual
NumberAdditional
Verification

Predefined
Template

Expression-specificchecksum

Relatedtemplates(with match
rules):My Number Individual
Number andsurname in
Kanji (Match
10)
My Number Individual
Number andsurname in
Kanji (Match100)
My Number Individual
Number andsurname in
Kanji (Match
50)

Japan: Passport
NumberJapan: Phone
Number•Appears in
passports
issued tocitizens•

Used intransactions
withgovernment
agencies andprivateentities•

Phone
number usedin JapanNone

Case-sensitive

Same nameNotapplicableNot applicableNot applicable

1-31

Trend Micro Data Protection Lists

Name

1-32

Description

Kazakhstan:
IBAN(International
Bank AccountNumber)•Kuwait: IBAN
(International
Bank AccountNumber)•Latvia: IBAN
(International
Bank AccountNumber)•Latvia: Phone
Number•Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Phone
number usedin Latvia

Latvia: Phone
NumberNot applicable

Predefined
Template
Same nameSame nameSame nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Validator•

Used as anational ID
numberLatvia:Personal Code•Issued by the
Office of
Citizenshipand Migration
Affairs tocitizens andresident
foreignnationals

Lebanon: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errors

Liechtenstein:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errors

Latvia: PK Personas Kods
(Personal Code)

Additional
Verification•

Birth dateembedded in
the number•

Expressionspecificchecksum

IBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

IBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Predefined
Template
Same nameSame nameSame name1-33

Trend Micro Data Protection Lists

Name
Lithuania: AK Asmens Kodas(Personal Code)

1-34

Description

Validator•

Used as anational ID
numberLithuania:
Personal Code•Issued by thepolice (under
the directionof the Ministryof Internal
Affairs) tocitizens

Lithuania: IBAN
(International
Bank AccountNumber)•Lithuania: Phone
NumberAdditional
Verification

Predefined
Template•

NumberprefixSame name•Birth dateembedded in
the number•

ExpressionspecificchecksumAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

•

Phone
number usedin Lithuania

Lithuania:
Phone
NumberNot applicable

Luxembourg:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Luxembourg:
Phone Number

•

Phone
number usedin
Luxembourg

Luxembourg:
Phone
NumberNot applicable

Same nameNot applicable

Same nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Additional
Verification

Description

Validator

Luxembourg:
TIN (Tax
Identification
Number)Used intransactions withgovernment
agencies andprivate entities

Luxembourg:
TIN (Tax
Identification
Number)Not applicable

Macedonia:ЕМБГ Единствен
матичен број награѓанинот
(Unique MasterCitizen Number)•

Used as anational ID
number•Birth dateembedded in
the number•

Issued by theformerYugoslav
republics tocitizens,
which
Macedonia
continued touse after its
independence

Macedonia:
Unique MasterCitizen
Number•Expressionspecificchecksum

Macedonia: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Malaysia: Mobile
Phone Number•

Mobile phone
number usedin Malaysia

Malaysia:
Mobile Phone
Number•Country Code

Predefined
Template
Not applicable

Same nameSame nameSame name1-35

Trend Micro Data Protection Lists

Name

Predefined
Template

Validator•

Also referred
to as MyKad•

Used as anational ID
numberBirth dateembedded in
the number

Same name•Malaysia:
National
Registration
Identity Card
Number•Issued by the
National
Registration
Departmentof Malaysia tocitizens andpermanent
residents

Malaysia: Phone
Number•Phone
number usedin Malaysia

Malaysia:
Phone
Number•Country CodeSame name

Malta: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Malta: Phone
Number•Phone
number usedin Malta

Malta: Phone
NumberNot applicableNot applicable

Malta: TIN (Tax
Identification
Number)Used intransactions withgovernment
agencies andprivate entities

None

Not applicableNot applicable

Malaysia: NRIC National
Registration
Identity Card
Number1-36

Additional
Verification

Description

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Mauritania: IBAN
(International
Bank AccountNumber)•

Mauritius: IBAN
(International
Bank AccountNumber)•Mexico: RFC Registro Federal
deContribuyentes(Tax
Identification
Number)Moldova: IBAN
(International
Bank AccountNumber)Additional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Issued to legal
entities

Mexico: Tax
Identification
Number•ExpressionspecificchecksumSame name•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Same name1-37

Trend Micro Data Protection Lists

Name

1-38

Description

Monaco: IBAN
(International
Bank AccountNumber)•Montenegro:
IBAN(International
Bank AccountNumber)•Montenegro:
JMBG Јединствени
матични бројграђана (Unique
Master Citizen
Number)Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used as anational ID
number•Birth dateembedded in
the number•

Issued by theformerYugoslav
republics tocitizens,
which
Montenegro
continued touse after its
independenceMontenegro:
Unique MasterCitizen
Number•Expressionspecificchecksum

Predefined
Template
Same nameSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Netherlands:
IBAN(International
Bank AccountNumber)•Netherlands:
Phone Number•

Additional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Phone
number usedin
Netherlands

Netherlands:
Phone
NumberNot applicableNot applicable

Netherlands: TIN(Tax
Identification
Number)Used intransactions withgovernment
agencies andprivate entities

Netherlands:
TIN (Tax
Identification
Number)Not applicableNot applicable

New Zealand:
IRD Number•

Usedprimarily fortax purposes;
also used intransactions
with private
entities

New Zealand:
IRD Number••

Issued by the
InlandRevenue
Department
to citizens andresident
foreignnationals

ExpressionspecificchecksumSame nameSame name1-39

Trend Micro Data Protection Lists

Name
New Zealand:
National HealthIndex Number

•

•

1-40

•

ExpressionspecificchecksumSame name•Case sensitive

Used toaccess healthand disability
supportservices

New Zealand:
National
Health Index
NumberNigeria: VerveIIN (Issuer
Identification
Number)Not applicable

Issued at birthor uponregistration
with theNational
Population
Register

Norway:National
identity
number•Birth date andpersonal
identifier
embedded in
the number•

2 expressionspecificchecksumsAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Issued by the
Ministry of
Health tocitizens

Debit, Prepaid, andCredit card
numbers for Verve
International;
Issued byInterswitch

Norway:Fødselsnummer(National
identity number)••Predefined
Template

Validator

Nigeria: Verve IIN(Issuer
Identification
Number)Norway: IBAN
(International
Bank AccountNumber)Additional
Verification

Description

Same nameSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Pakistan: IBAN
(International
Bank AccountNumber)•Poland: Dowód
Osobisty(National
Identity Card
Number)•Poland: IBAN
(International
Bank AccountNumber)•Poland: PESEL Powszechny
Elektroniczny
SystemEwidencji
Ludności
(National
Identification
Number)Poland: Phone
NumberAdditional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Appears on
the identity
card issued to
citizens

Poland:National
Identity Card
Number•Expressionspecificchecksum•Case-sensitiveAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Issued topermanent
andtemporaryresidents

Poland:National
Identification
Number•Expressionspecificchecksum•

Phone
number usedin Poland

Poland:Phone
NumberNot applicable

Predefined
Template
Same nameSame nameSame nameSame nameNot applicable

1-41Trend Micro Data Protection Lists

Name

Description

Portugal: IBAN
(International
Bank AccountNumber)•Portugal: NIF Número deIdentificação
Fiscal (Tax
Identification
Number)Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used intransactions
withgovernment
agencies andprivateentities

Portugal: NIF Número deIdentificação
Fiscal (Tax
Identification
Number)Not applicableNot applicablePortugal: Phone
Number•Phone
number usedin Portugal

Portugal:
Phone
NumberNot applicableNot applicable

Romania: CNP Cod Numeric
Personal(Personal
Numeric Code)•Also referred
to as personal
ID number

Romania:
Personal
Numeric Code•

NumberprefixSame nameUsedprimarily for
identification
purposes••

Birth dateembedded in
the number•

Expressionspecificchecksum•

1-42

Additional
Verification

Validator

Issued by the
Ministry ofInternal
Affairs tocitizens at
birthSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Romania: IBAN
(International
Bank AccountNumber)•Romania: Phone
NumberAdditional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

•

Phone
number usedin Romania

Romania:
Phone
NumberNot applicable

San Marino:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Saudi Arabia:
IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Predefined
Template
Same nameNot applicable

Same nameSame name1-43

Trend Micro Data Protection Lists

Name

1-44

Description

Serbia: IBAN
(International
Bank AccountNumber)•Serbia: JMBG Јединствени
матични бројграђана (Unique
Master Citizen
Number)Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used as anational ID
number•Birth dateembedded in
the number•

Issued by theformerYugoslav
republics tocitizens,
which Serbia
continued touse after its
independence

Serbia:Unique MasterCitizen
Number•Expressionspecificchecksum

Predefined
Template
Same nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

NameSingapore: NRIC- National
Registration
Identity Card
NumberDescription•

Usedprimarily for
identification
purposes; also
used intransactions
withgovernment
agencies andprivateentities

Additional
Verification

Predefined
Template•

ExpressionspecificchecksumSame name•Case sensitive

Validator
Singapore:
National
Registration
Identity Card
Number

•A numberissued by the
Immigration &Checkpoints
Authority to
citizens andresident
foreignnationals

Singapore:
Phone Number

•

Phone
number usedin Singapore

Singapore:
Phone
Number•Country CodeSame name

Slovakia: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

Slovakia: Phone
Number•Phone
number usedin Slovakia

Slovakia:
Phone
NumberNot applicableNot applicable

1-45Trend Micro Data Protection Lists

Name

Description

Validator•

Used as anational ID
numberSlovakia: Birth
Number•Issued by the
civic records
authority to
citizens•

Used as anational ID
number•Issued by theformerYugoslav
republics tocitizens,
which
Slovenia
continued touse after its
independence

Slovenia: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsSlovenia: Phone
Number•Phone
number usedin Slovenia

Slovakia: RC Rodne Cislo(Birth Number)Slovenia: EMŠO Enotna matičnaštevilka občana(Unique MasterCitizen Number)

1-46

Additional
Verification•

Birth dateembedded in
the number•

Expressionspecificchecksum•

Birth dateembedded in
the number•

Expressionspecificchecksum

IBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Slovenia:
Phone
NumberNot applicable

Slovenia:
Unique MasterCitizen
NumberPredefined
Template
Same nameSame nameSame nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Validator

Additional
Verification

Predefined
Template

South Africa:
Personal
Identification
Number•Issued tocitizens andpermitresidence
permitholders whoare 16 years or
olderSouth Africa:
Personal
Identification
Number•Expressionspecificchecksum

Not applicable

South Korea:
Resident
Registration
Number•Used toidentify
residents intransactions
with private
entities

South Korea:
Resident
Registration
Number•Birth dateembedded in
the number

Same name•

Gender digit

Spain: DNI Documento
Nacional de
Identidad(National
Identity Card
Number)•Appears in thenational
identity
document
issued tocitizens

Not
applicableNot applicable•

Used intransactions
withgovernment
agencies andprivateentities•

Full Spanish
name in “First
Name”“Surname”
formatSpain: Full
Spanish Name•

Spain: Full
Spanish Name

Case-sensitive

Same nameSame name1-47

Trend Micro Data Protection Lists

Name
Spain: IBAN
(International
Bank AccountNumber)•Spain: NAF Número deAfiliacion a la
Seguridad Social(Social Security
Number)Spain: NIF Número deIdentificación
Fiscal (Tax
Identification
Number)Spain: Phone
Number

1-48

Description

Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used inmaking social
security
contributions
and accessing
publicbenefits

Not
applicableNot applicable•

Used tomonitorincome tax
contributions
and financial
statusSpain: Tax
Identification
Number•Expressionspecificchecksum•Case-sensitive•

Issued tocitizens; for
non-citizens,
it is called NIE
or Número deIdentificaciónde Extranjero

•

Phone
number usedin Spain

Spain: Phone
NumberNot applicable

Predefined
Template
Same nameSame nameSame nameNot applicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Sweden: IBAN
(International
Bank AccountNumber)•Sweden:Personnummer(Personal
Identity
Number)•Sweden: Phone
NumberAdditional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Used
primarily as atax ID andsocial security
number, butalso used intransactions
withgovernment
agencies andprivateentities

Sweden:Personal
Identity
Number•Birth dateembedded in
the number•

Expressionspecificchecksum

Sweden:Phone
NumberNot applicable•

Issued by the
Swedish Tax
Agency tocitizens andresident
foreignnationals•

Phone
number usedin Sweden

Predefined
Template
Same nameSame nameNot applicable

1-49Trend Micro Data Protection Lists

Name

1-50

Description

Switzerland:
IBAN(International
Bank AccountNumber)•Taiwan: Address

Additional
Verification

Validator

Predefined
TemplateAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Home address
in Taiwan(country, city,
area, street,building,
number)Taiwan:Address

Not applicable

Same nameTaiwan: Bank
Account Number•

Used toidentify thebank accountof anindividual ororganizationin Taiwan

Taiwan: Bank
Account
NumberNot applicable

Same nameTaiwan: Business
Administration
NumberBusiness
administration
numberTaiwan:Business
Administration Number

Not applicableTaiwan: Cathay
United Bank
Account Number•

Taiwan:Cathay United
Bank AccountNumberNot applicable

Used toidentify theaccount of a
Cathay UnitedBank
customerSame nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

Predefined
Template

Taiwan: IMSI
(International
MobileSubscriber
Identity)•Aninternational
standard for
uniquely
identifying
cellularnetwork users
in Taiwan

NotapplicableNot applicable

Same nameTaiwan: Jih Sun
Bank AccountNumber•Used torecord thefinancialtransactions
between an
account
holder and Jih
Sun Bank

Taiwan: Jih
Sun Bank
Account
Number•ExpressionspecificchecksumSame nameTaiwan: MegaBank AccountNumber•Used torecord thefinancialtransactions
between an
account
holder andMega Bank

Taiwan: MegaBank AccountNumber•ExpressionspecificchecksumSame nameTaiwan: Mobile
Phone Number•

Mobile phone
number usedin Taiwan

Taiwan:Mobile Phone
Number•Country CodeSame nameTaiwan: Name•

Family andgiven name ofa Taiwancitizen or
resident

Taiwan: Name

Not applicable

Same name1-51

Trend Micro Data Protection Lists

Name

1-52

Description

Additional
Verification

Validator

Taiwan: National
Health Insurance(NHI) Drug
Codes

•

Used toidentify drugs
reimbursed
through the
National
HealthInsurance(NHI) programin Taiwan

Taiwan:National
HealthInsurance(NHI) Drug
Codes

Not applicableTaiwan: National
Identification
Number•Issued tonationals who
havehouseholdregistration in
TaiwanTaiwan:National
Identification
Number•Gender digit•

Expressionspecificchecksum•Case-sensitive

Predefined
Template
Same nameSame name•

Used intransactions
that require
identity
verification

Taiwan: SKH
Medical Record
Number•Used toidentify
patients in the
Shin Kong Wu
Ho-Su
Memorial
Hospital

Taiwan: SKH
Medical
RecordNumber•ExpressionspecificchecksumSame nameTaiwan: VGH
Medical Record
Number•Used toidentify
patients in the
TaiwanVeterans
GeneralHospital

Taiwan: VGH
Medical
RecordNumber•ExpressionspecificchecksumSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Validator

Additional
Verification

Predefined
TemplateThailand:National
Identification
Number•Issued tonationals who
havehouseholdregistration in
Thailand;used intransactions
that require
identity
verification

Thailand:National
Identification
Number•ExpressionspecificchecksumSame nameThailand: SCB
Bank AccountNumber•Used torecord thefinancialtransactions
between an
account
holder and
SCB Bank

Thailand: SCB
Bank AccountNumber•ExpressionspecificchecksumSame nameThailand: SCB
Bank Loan
Account Number•

Used torecord thefinancialtransactions
between an
account
holder and
SCB Bank

Thailand: SCB
Bank Loan
Account
Number•ExpressionspecificchecksumSame name

Tunisia: IBAN
(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
formatSame name•Case-sensitive

1-53

Trend Micro Data Protection Lists

Name

1-54

Description

Turkey: IBAN
(International
Bank AccountNumber)•Turkey: T.C.
Kimlik No. Türkiye
Cumhuriyeti
Kimlik Numarası(Personal
Identification
Number)Additional
Verification

ValidatorAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive•

Used bycitizens inaccessingpublic andprivateservices

Turkey:Personal
Identification
Number•Expressionspecificchecksum

UK: Home
Address•Home
addresses in
the United
KingdomNotapplicableNot applicable

UK: IBAN(International
Bank AccountNumber)•Aninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

UK: NHS Number(National HealthService Number)•

Used toidentify
patients andlocate healthrecords

UK: National
Health Service
Number•Expressionspecificchecksum

Predefined
Template
Same nameSame nameNot applicable

Same nameSame nameData Loss Prevention - Predefined Data Identifiers and Templates

Name
UK: NIN(National
Insurance
Number)Description•

Used torecordnational
insurance andtax
contributions•

Functions as
reference
number incommunicatio
ns withgovernment
agencies

UK: RD&E
Hospital Number•

United ArabEmirates: IBAN
(International
Bank AccountNumber)•Additional
Verification

Validator

Predefined
Template

Not
applicableNot applicable

Same name

Used toidentify
patients of theRoyal Devon &ExeterHospital

UK: RD&E
Hospital
NumberNot applicable

Same nameAninternational
standard for
identifyingbank accounts
with minimalrisk oftranscription
errorsIBAN(International
Bank AccountNumber)•Country code
format•Case-sensitive

Same name1-55

Trend Micro Data Protection Lists

Name
US: ABA Routing
Number

1-56

Description

Additional
Verification

Predefined
Template•

First two
digits of thenumberSame name•

Expressionspecificchecksum

Validator•

Also known asrouting transit
number (RTN)

US: ABA
Routing
Number•Identifies the
specific
financial
institution
responsible
for anegotiable
instrument•

Used inprocessing
directdeposits andotherautomatedtransfers

US: California ID
or Driver's
License Number•

ID numbers
issued by theState of
California

NotapplicableNot applicable

Same name

US: Dollar
Amount•Dollarcurrency
amountNotapplicableNot applicable

Same name

US: HICN (Health
Insurance Claim
Number)•Assigned to
Medicarebeneficiaries

Not
applicableNot applicable

Same name•

Used inprocessing
MedicareclaimsData Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Additional
Verification

Validator

Predefined
Template

US: Home
Address•Home
addresses in
the UnitedStatesNotapplicableNot applicable

US: NPI(National
ProviderIdentifier)•Issued tohealth careproviders andother HIPAAcovered
entities
engaged instandard
HIPAA
transactions,such aselectronicclaims andclaim status
inquiries

US: National
ProviderIdentifier•

ExpressionspecificchecksumSame name

US: Phone
Number•Phone
number usedin the UnitedStates

US: Phone
Number•Area code

Same name

US: SSN (Social
Security
Number)•Issued tocitizens,
permanent
residents andeligibleforeignnationals

US: Social
Security
Number•Area code

Same name•Group
number•Not applicable

Used fortaxpayer
identification,
incomereporting, andrecordkeeping

1-57

Trend Micro Data Protection Lists

Recognized File Types
The following table outlines the file types that Trend Micro Data Loss
Prevention recognizes.
Note
Data Loss Prevention provides the following predefined data identifier andtemplate to recognize file extensions:
All File Extension

File Type

File Extensions

Documents and Encoding Methods
Adobe™ Portable Document Format (Nonencrypted).pdf

Corel® WordPerfect®

.wpd, .wp

Extensible Markup Language (XML).xml

Fuji Xerox DocuWorks™

.xbd, .xdw

HyperText Markup Language (HTML).htm

JustSystems Ichitaro.jtd

Lotus™ Ami Pro.sam

Microsoft Word for Windows (Non-encrypted).doc, .docm, .docx, .dot, .dotm, .dotx

Microsoft Write.wriRich Text Format (RTF).rtf

WordStar.wsd

Graphics
Bitmap1-58.bmp

Data Loss Prevention - Predefined Data Identifiers and TemplatesFile Type

File Extensions

Digital Imaging and Communications in Medicine(DICOM).dcm

Encapsulated PostScript (EPS).eps

Graphics Interchange Format (GIF).gif

Joint Photographic Experts Group (JPEG).jpg

Portable Network Graphics (PNG).png

Tagged Image File Format (TIFF).tif

Vector Graphics
AutoCAD™

.dxf

AutoDesk™

.dwg

CATIA™

.CATDrawing, .CATPart, .CATProduct

Graphic Data System.gds

PostScript.psSiemens™ NX Unigraphics.prt

SolidWorks®

.abc, .sldasm, .slddrw, .sldprt

Multimedia Files
Adobe Flash™

.swf

Apple™ QuickTime™

.mov

Audio Video Interleave (AVI).avi

Musical Instrument Digital Interface (MIDI).mid

Moving Picture Experts Group (MPEG).mpeg

Waveform Audio File Format (WAV).wav

Compressed Files

1-59

Trend Micro Data Protection Lists

File Type

File Extensions

7zip

.7z

ARC/PAK

.arc

ARJ

.arj

Bzip2

.bz2

Compress

.Z

Gzip

.gz

LHA

.lzh

Microsoft Compiled HTML Help.chm

Microsoft Outlook™ Message.msg

Microsoft Outlook Data File.pst

Microsoft Outlook Express Data File.dbx

Multipurpose Internet Mail Extensions (MIME)

.eml

PGP

.pgp

RAR

.rar

Tape Archive (TAR)

.tar

Zip

.zip

Databases
Base SAS Data File.sas7bdat

dBase™

.dbf

Kanrikougaku Kenkyusho KIRI Database.tbl

Microsoft Access™

.accdb, .mdb

Spreadsheets
Lotus 1-2-3

1-60.123, .wk1, .wk3, .wk4, .wke, .wks

Data Loss Prevention - Predefined Data Identifiers and TemplatesFile Type

File Extensions

Microsoft Excel™ (Non-encrypted).xls, .xlw, .xlsx, .xltx, .xlsb, .xltm, .xlsm, .xl
c, .xlam

Quattro Pro®

.qpw, .wb3, .wb2, .wb1, .wq1

Presentation and Diagram Files
Microsoft PowerPoint™ for Windows - Nonencrypted.ppt, .pot, .pps, .pptx, .potx, .ppsx, .potm,.pptm, .ppsm

Microsoft Visio.vdx, .vsd, .vss, .vst, .vsx, .vtx, .vdw

Linked and Embedded Files
Object Linking and Embedding (OLE).ipt, .idw, .iam, .pqw, .msoffice

Encrypted Files
Encrypted compressed files.rar, .zip

Encrypted documents.accdb, .doc, .docx, .pdf, .ppt, .pptx, .wb1,.wb2, .wq1, .wpd, .xls, .xlsx

Predefined Keyword Lists
Trend Micro products provide the following predefined keyword lists:
Name

Description

Conditions

Predefined
Template

Adult

Words commonly
associated with the adultentertainment industry,including pornographic
websites•

Number of
keywords: Specificnumber (4)Same nameCommon Medical
Terms

Terms used by hospitals
and other health careproviders•Number of
keywords: Specificnumber (5)Same name1-61

Trend Micro Data Protection Lists

Name
Forms: (First),(Middle), Name

Conditions

Predefined
Template•

Number of
keywords: All

Notapplicable•

Distance: 50

Description
Common use of the “First”,“Middle”, and “Last Name”
fields in documents such as
forms

Forms: Date of BirthCommon use of terms thatindicate birth dates indocuments such as forms•

Number of
keywords: All

Notapplicable

Forms: Expiration
Date

Common use of terms thatindicate the expiration dateof an item (such as a creditcard) in documents such as
forms

•

Number of
keywords: Any

Notapplicable

Forms: First Name,
Last Name

Common use of the (First
Name) and (Last Name)
fields in documents such as
forms

•

Number of
keywords: All

Notapplicable•

Distance: 50

Forms: Place of BirthCommon use of terms thatindicate a person's
birthplace in documents
such as forms•

Number of
keywords: Any

Notapplicable

Forms: Street, City,
State

Common use of the (State),(City) and (Street) fields indocuments such as forms•

Number of
keywords: All

Notapplicable•

Distance: 50•

Number of
keywords: Specificnumber (50)Same name•

Number of
keywords: Specificnumber (10)Same name

Japan: Surname in
Hiragana (Match 50)

Japanese surnames typed
in Hiragana* The list contains 1,672
Japanese surnames.

Japan: Surname in
Kanji 1 (Match 10)

Japanese surnames typed
in Kanji* The list contains 2,000Japanese surnames.

1-62

Data Loss Prevention - Predefined Data Identifiers and Templates

Name

Description

Japan: Surname in
Kanji 2 (Match 50)

Japanese surnames typed
in KanjiConditions•

Number of
keywords: Specificnumber (50)Same name•

Number of
keywords: Specificnumber (100)Same name•

Number of
keywords: Specificnumber (50)Same name•

Number of
keywords: Specificnumber (50)Same name* The list contains 2,000Japanese surnames.
Japan: Surname in
Kanji 3 (Match 100)

Japanese surnames typed
in Kanji* The list contains 2,000Japanese surnames.

Japan: Surname in
Katakana (Match 50)

Japanese surnames typed
in Katakana

Predefined
Template* The list contains 1,672
Japanese surnames.
Japan: Surname in
One-Byte Katakana(Match 50)

Japanese surnames typed
in one-byte Katakana

RacismWords that may be
offensive to specific ethnic
groups•Number of
keywords: Specificnumber (4)Same nameSource Code: C#

Common source code
functions/commands used
in C#

•

Number of
keywords: Specificnumber (6)Same name•Case-sensitive•

Number of
keywords: Specificnumber (6)•Case-sensitive

Source Code: C/C++* The list contains 1,672
Japanese surnames.

Common source code
functions/commands usedin C/C++

Same name1-63

Trend Micro Data Protection Lists

Name

Description

Source Code: COBOL

Common source code
functions/commands usedin COBOL

Source Code: Java

Source Code: Perl

Source Code: VB

US: HCFA (CMS) 1500
Form

Common source code
functions/commands usedin Java

Common source code
functions/commands usedin PerlCommon source code
functions/commands usedin Visual BasicStandard claim form usedby health care
professionals and suppliers
when requesting payment
from Medicare for renderedservices

Conditions•

Number of
keywords: Specificnumber (6)•Case-sensitive•

Number of
keywords: Specificnumber (6)•Case-sensitive•

Number of
keywords: Specificnumber (6)•Case-sensitive•

Number of
keywords: Specificnumber (6)•Case-sensitive•

Number of
keywords: All•

Case-sensitive•

Number of
keywords: Specificnumber (4)Predefined
Template
Same nameSame nameSame nameSame nameSame name* HCFA - Health Care
Financing Agency* CMS - Centers for Medicare
and Medicaid Services
US: SOX(SarbanesOxley)
Confidentiality
Terms

1-64

Terms commonly used todescribe confidential
information

Notapplicable

Data Loss Prevention - Predefined Data Identifiers and Templates

Conditions

Predefined
Template

Name

Description

US: SOX(SarbanesOxley) Financial
Terms

Terms commonly used infinancial and accounting
data•

Number of
keywords: Specificnumber (22)Not
applicable

US: UB-04 Form

A universal billing form that
simplifies and standardizes
the billing and collection ofhealth care data•

Number of
keywords: All

Same name•Case-sensitive•

Number of
keywords: Specificnumber (4)* UB – Uniform Bill
Weapons

Words that describe
implements of violenceNotapplicable

Predefined Templates
To help users more quickly identify the sensitive data within corporate
networks, Data Loss Prevention provides predefined templates for the
majority of the predefined data identifiers. In addition to the templates
derived directly from data identifiers, Data Loss Prevention also provides
users with specific templates that help address regulatory complianceconcerns.
Note
The following tables outline the predefined templates that are not based
directly off of predefined data identifiers. For more information about
templates based off of data identifiers, see:•

Predefined Expressions on page 1-2•

Predefined Keyword Lists on page 1-61

Trend Micro products provide the following predefined regulatorycompliance templates:
1-65

Trend Micro Data Protection Lists

Table 1-1. Regulatory Compliance Templates
Name
GLBA

•

Gramm-Leach-Bliley Act; also known as
the Financial Services Modernization Act•

Places stringent obligations andpenalties on the financial services
industry to safeguard the privacy of
consumer financial information•

Health Insurance Portability andAccountability Act•

A privacy rule that regulates the use anddisclosure of certain information held bycovered entities•

Payment Card Industry Data Security
Standard•

An information security standard fororganizations that handle cardholder
information for major debit, credit,
prepaid, e-purse, ATM, and POS cards•

Created by the Payment Card Industry
Security Standards Council to increase
controls around cardholder data and to
reduce credit card fraud

Sarbanes-Oxley Act•

SB-1386•

HIPAA

PCI-DSS

1-66

Countries with
Dedicated
Templates

Description
•

US

•

US

•

US

A law enacted in 2002 that mandates
corporate responsibility throughfinancial disclosures and audits•US

A California law that regulates theprivacy of personal information•

USData Loss Prevention - Predefined Data Identifiers and Templates

Table 1-2. Generic Templates
NameBanking and Financial
Information

Cardholder Information

Countries with DedicatedTemplates

Description
Banking and financial
information, such as
banking codes androuting numbers

Cardholder information,such as credit card
numbers•

Australia,
New Zealand•Germany•

Canada

•

India

•

China

•

Ireland•Denmark•

Singapore•

European
Union•

South Korea

•

UK

•

France•US•

Australia,
New Zealand

•

India

•

CanadaIreland••Singapore

•

China

•

South Korea•

Denmark•

UK•

France

•

US

1-67

Trend Micro Data Protection Lists

1-68

Name

Description

European Union: Phone
NumberPhone or mobile number
used in the European
Union

Countries with DedicatedTemplates
European Union countries, which
include the following:•

Austria

•

Italy

•

Belgium•

Latvia•Bulgaria•

Lithuania•

Croatia•

Luxembourg•

Cyprus•Czech
Republic

Malta

•

•

Netherlands•

Denmark•

Poland•Estonia•

Portugal•

Finland•Romania•

France•Slovakia•

Germany•

Slovenia•

Greece

•

Spain

•

Hungary•

IrelandSweden••Ireland•Singapore•

UK

Financial Transaction
Information

Financial transaction
information, such as
routing numbers andcurrency•

US

Healthcare Information

Healthcare information,such as patient data andhealth records•

Australia,
New Zealand•

Canada•India

Data Loss Prevention - Predefined Data Identifiers and Templates

NameIdentification Numbers

Personally Identifiable
Information

Countries with DedicatedTemplates

Description•

Issued to citizens
and resident foreign
nationals•

Used primarily intransactions withgovernment
agencies andprivate entities

Information that can beused singly or with othersources to uniquely
identify, contact or
locate a single individual•

European
Union•

Australia,
New Zealand•

Canada

•

China

•

Denmark•

EuropeanUnion

All PersonallyIdentifiable Information(English)Information that can beused singly or with othersources to uniquely
identify, contact or
locate a single individual

Not applicableContact/Customer/Client
List (English)

Contact/customer/client
information, such as first
name, last name, homeaddress, and birth date

Not applicable

Source CodeCommon source code
functions/commands

Not applicable•France

•

India

•

Ireland•Singapore

•

UK

•

US

1-69

Chapter 2

Data Loss Prevention - Supported
Applications•

Cloud Storage Applications on page 2-2•

Data Recorders on page 2-2•

Email Clients on page 2-4•

FTP on page 2-5•

HTTP and HTTPS on page 2-6•

IM Applications on page 2-8•

Peer-to-Peer Applications on page 2-9•

PGP Encryption on page 2-10•

Printer on page 2-10•

Removable Storage on page 2-11•

SMB Protocol on page 2-14•

Synchronization Software (ActiveSync) on page 2-17•

Webmail on page 2-18
2-1

Trend Micro Data Protection Lists

Cloud Storage Applications
Important
The following table lists cloud storage applications tested by Trend Micro.
Trend Micro cannot be held responsible for any damage or loss of data that may
occur through the use of any untested applications.

Application

Process Name

WebsiteOneDrive™

•

onedrive.exe

onedrive.live.com

Dropbox•Dropbox.exe

dropbox.com•

Dropbox_Universal.Wind
ows.exe•

Dropbox.WindowsApp.exe•box.exe•

BoxSync.exe•

googledrivesync.exe•

RuntimeBroker.exe

Box

Google Drive™

app.box.com

drive.google.com

Data Recorders
Important

2-2•

Trend Micro recommends applying the latest product patches or hotfixes
to receive full support for the data recorders included in this list.

•

The following table lists data recording devices tested by Trend Micro.
Trend Micro cannot be held responsible for any damage or loss of data that
may occur through the use of any untested devices.

Data Loss Prevention - Supported Applications•

Pioneer™ DVR-XD09C 8X•

Samsung™ SES084•

Sony™ AD-7240S•

Pioneer™
AD-7240S•

Lenovo™ ThinkPad® T61

Important
The following table lists data recording software tested by Trend Micro. Trend
Micro cannot be held responsible for any damage or loss of data that may occur
through the use of any untested software.
Software
Nero

Process Name•

nero.exe•

neroexpress.exe•

nerostartsmart.exe•

nmdllhost.exe

CDBurnerXP•

cdbxpp.exe

CyberLink Power2Go•

power2go.exe•

power2goExpress.exe•

Power2Go8.exe•

power2go8.exe•

power2goexpress8.exe•

Power2Go9.exe•

power2goexpress9.exe

Windows Media
Player•wmplayer.exe

Windows Explorer•

explorer.exe

2-3Trend Micro Data Protection Lists

Email Clients
Important
The following table lists email clients tested by Trend Micro. Trend Microcannot be held responsible for any damage or loss of data that may occur
through the use of any untested clients.
Email Client

ProtocolVersionCommuniCrypt Mail,
Un-crypt ModeNot applicable

SMTP

1.1.6

Eudora™

Sponsored Mode

SMTP

7.1.0.9

Lotus Notes™

Not applicableNot applicable

7.0, 8.0, 8.5.3, 9.0

Mail (for Windows 8)

Windows Store app

SMTP

Not applicable

Microsoft Outlook

Standard and Professional
EditionNot applicable

2003

Standard, Professional,
and Professional Plus
EditionNot applicable

2007

Home and Business/
Standard/Professional/
Professional Plus Edition

Not applicable2010 (32-bit and 64bit)

Home and Business/
Standard/Professional/
Professional Plus Edition

Not applicable2013 (32-bit and 64bit)

Home and Business/
Standard/Professional/
Professional Plus Edition

Not applicable2016 (32-bit and 64bit)

Not applicable

SMTP

6.0

Microsoft™ Outlook™
Express

2-4

EditionData Loss Prevention - Supported Applications

Email Client

EditionProtocolVersionMozilla™ Thunderbird™

Not applicable

SMTP

2.0.0.17, 3.1, 7.0,
12.0.1, 16.0, 17.0,
24.1.1, 24.2.0, 24.3.0,
31.0

Pegasus

Not applicable

SMTP

4.42

PocoMail™

Not applicable

SMTP

4.5.0.3910, 4.8

The Bat!

Professional Edition

SMTP

4.0.34

Windows™ Live™ Mail

Not applicable

SMTP

2009

Windows Mail on
Windows Vista™

Not applicable

SMTP

6.0

FTP
Important
The following table lists FTP clients tested by Trend Micro. Trend Micro cannot
be held responsible for any damage or loss of data that may occur through theuse of any untested clients.
FTP Client

EditionVersionBulletProof FTP

Not applicable

2.63Core FTP Lite

Not applicable

2.1

CuteFTP™

Professional Edition

8.3, 9.0.5

Filezilla™ Client

Not applicable

3.3.0.1, 3.7.4, 3.10.2, 3.10.3, 3.21.0,
3.41.2, 3.43.0

Filezilla™ Server

Not applicable

0.9.33, 0.9.43

2-5

Trend Micro Data Protection Lists

FTP Client
FTP Commander

EditionVersionBasic Version

8.0

Deluxe Version

9.0.2

Pro Version

8.0

FTP Command Line (ftp.exe)

Not applicable

Any version compatible with thehost machine's operating system

FTP Explorer

Not applicable

8.8.23.1

IPswitch™ WS_FTP™

Professional Edition

12.2

Microsoft Internet Explorer

Not applicable

6.0 SP2/SP3, 7.0, 8.0

NCFTP (Command Line FTP
Client)Not applicable

3.2.2

SmartFTP

Not applicable

4.0.1216 (32-bit and 64-bit)

Windows Explorer

Not applicable

Any version compatible with thehost machine's operating system

WinSCP

Not applicable

5.15.2

HTTP and HTTPS
Important
The following table lists web browsers tested by Trend Micro. Trend Microcannot be held responsible for any damage or loss of data that may occur
through the use of any untested browsers.

ProtocolBrowser2-6

Google™ Chrome™

HTTP, HTTPSMicrosoft Internet Explorer

HTTP, HTTPSData Loss Prevention - Supported Applications

BrowserProtocolMozilla™ Firefox™

HTTP, HTTPSMicrosoft™ Edge™

HTTP, HTTPS

Important
The following lists web applications tested by Trend Micro. Trend Micro cannot
be held responsible for any damage or loss of data that may occur through theuse of any untested applications.
•facebook.com•

wetransfer.com•

uploadfiles.io•

files.fm•

smallpdf.com•

ilovepdf.com•

twitter.com•

mega.nz•

send.firefox.com•

nofile.io•

cp.sync.com•

mediafire.com•

files2u.com•

online.axel.org•

jumpshare.com•

imgbb.com
2-7

Trend Micro Data Protection Lists•

4sharerd.com•

dlptest.com•

dlp-test.com•

dlp-test.tcp-udp.net•

netmarks.us•

dataleaktest.com•

Sharepoint.com

IM Applications
Important
The following table lists IM applications tested by Trend Micro. Trend Microcannot be held responsible for any damage or loss of data that may occur
through the use of any untested applications.

Application
AOL™ Instant Messenger™

6.9, 7.2, 7.5, 8.0.7.1

MSN™ on Windows Server 2003

8.5

Skype™

4.0, 4.1, 4.2, 5.2, 5.5, 5.8, 5.10, 5.11.0.102,
6.0.0.120, 6.3.73.105, 6.9.60.106, 6.11.60.102,
7.2.103, 7.26.101, 7.37.103, 7.40.0.103

Skype™ for Business16.0.4288.100, 16.0.4417.0000,
16.0.6528.1017, 16.0.8201.2200,
16.0.9126.2098, 16.0.9226.2114

NoteTrend Micro products support only
detection of sensitive files transmittedusing this application.

2-8

VersionData Loss Prevention - Supported Applications

Application
Tencent QQ

Version2011, 2012, 2013, 5.0.9857.0

Note
Trend Micro products support only
detection of sensitive files transmittedusing this application.
Windows Live Messenger™

2009, 2011, 2012

Windows Messenger

4.7, 5.1

Yahoo!™ Messenger

10.0, 11.0, 11.5

Peer-to-Peer Applications
Important
The following table lists peer-to-peer applications tested by Trend Micro. Trend
Micro cannot be held responsible for any damage or loss of data that may occur
through the use of any untested applications.

VersionApplication
Apple iTunes for Microsoft Windows

10.5.3.3, 10.7, 11.1, 12.6

BitComet

1.29 (32-bit and 64-bit)

BitTorrent™

7.5 and 7.8.2

Emule

0.50a

Emule Plus

1.2b, 1.2e

HTC Sync

3.0.5606, 3.2.20, 3.3.63

HTC Sync Manager

2.1.77.0

2-9

Trend Micro Data Protection Lists

Application

VersionµTorrent™

3.0.0.25683, 3.3.2.30303, 3.4.3

PGP Encryption
Important
The following table lists PGP encryption software tested by Trend Micro. Trend
Micro cannot be held responsible for any damage or loss of data that may occur
through the use of any untested software.
SoftwarePGP Desktop

Mode

VersionSelf-decrypting Archive Mode

10.0.3, 10.1.0, 10.1.1, 10.2.0(32-bit and 64- bit), 10.3.2 (32bit and 64-bit)

Printer
Important
The following table lists print-capable applications that were tested by Trend
Micro. Trend Micro cannot be held responsible for any damage or loss of datathat may occur through the use of any untested applications.
Application

2-10

EditionVersionAdobe Acrobat™

Standard and Pro

10.x

Adobe Reader™

Not applicable

7.0, 8.0, 9.20, 10.x, 11.0

Microsoft Paint

Not applicable

Any version compatible withthe host machine's operating
systemData Loss Prevention - Supported Applications

Application

EditionVersionMicrosoft Visual Studio™

Not applicable2005

Microsoft Word, Excel, andPowerPoint

Standard, Professional, andPremium Edition

2000

Microsoft Word, Excel,
PowerPoint, and Visio

Standard and Professional
Edition2003

Microsoft Word, Excel, andPowerPoint

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

TextPad™

Not applicable

5.4.2

UltraEdit

Not applicable17.20.1016

Windows Notepad

Not applicable

Any version compatible withthe host machine's operating
systemWindows Wordpad

Not applicable

Any version compatible withthe host machine's operating
systemRemovable Storage
Important
The following table lists removable storage devices tested by Trend Micro.
Trend Micro cannot be held responsible for any damage or loss of data that may
occur through the use of any untested devices.

2-11

Trend Micro Data Protection Lists•

Memory Stick™ Pro Duo•

miniSD™ card•

USB 15-in-1 media reader•

microSD™ card•

MMC card•

USB storage device (hard disk
drive or flash drive)

Important
The following table lists data transmission-capable applications tested by Trend
Micro. Trend Micro cannot be held responsible for any damage or loss of datathat may occur through the use of any untested applications.

Application

VersionAdobe Reader

Not applicable

9.x, 10.x, 11.0

Microsoft Excel

Standard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Not applicable

6.0 SP2/SP3

Not applicable7.0

Not applicable

8.0 (32-bit and 64-bit)

Not applicable

9.0 (32-bit and 64-bit)

Not applicable

10.0 (32-bit and 64-bit)

Not applicable

11.0 (32-bit and 64-bit)

Microsoft Internet
Explorer

2-12

EditionData Loss Prevention - Supported Applications

Application
Microsoft PowerPoint

EditionVersionStandard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Standard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Mozilla Firefox

Not applicable

3.0, 3.5, 4,0, 5.0, 6.0, 7.0,
8.0, 9.0, 10.0, 11.0, 12.0,
13.0, 14.0, 15.0, 16.0.2, 17.0

Reader (for Windows 8)

Windows Store app

Not applicable

UltraEdit

Not applicable17.20.1016

Microsoft Word

2-13

Trend Micro Data Protection Lists

Application

EditionVersionWindows Command
Prompt (COPY and MOVE
commands)

Not applicable

Any version compatible
with the host machine's
operating system

Windows Explorer

Not applicable

Any version compatible
with the host machine's
operating system

Windows Notepad

Not applicable

Any version compatible
with the host machine's
operating system

Windows Wordpad

Not applicable

Any version compatible
with the host machine's
operating system

SMB Protocol
Important
The following table lists shared file access-capable applications that were tested
by Trend Micro. Trend Micro cannot be held responsible for any damage or lossof data that may occur through the use of any untested applications.
Application
Adobe Reader

2-14

Edition/ModeNot applicable

Version9.x, 10.x, 11.0

Data Loss Prevention - Supported Applications

Application
Microsoft Excel

Microsoft Internet Explorer

Edition/Mode

VersionStandard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Not applicable

6.0 SP2/SP3

Not applicable7.0

Not applicable

8.0 (32-bit and 64-bit)

Not applicable

9.0 (32-bit and 64-bit)

Not applicable

10.0 (32-bit and 64-bit)

Not applicable

11.0 (32-bit and 64-bit)

2-15

Trend Micro Data Protection Lists

Application
Microsoft PowerPoint

VersionStandard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Standard, Professional, andPremium Edition

2000

Standard and Professional Edition

2003

Standard, Professional, andProfessional Plus Edition

2007

Standard, Professional, andProfessional Plus Edition

2010 (32-bit)

Professional Plus Edition

2010 (64-bit)

Professional Plus Edition2013 (32-bit and 64-bit)

Professional Plus Edition

2016 (32-bit and 64-bit)

Mozilla Firefox

Not applicable

3.0, 3.5, 4,0, 5.0, 6.0, 7.0, 8.0,
9.0, 10.0, 11.0, 12.0, 13.0,
14.0, 15.0, 16.0.2, 17.0

Reader (for Windows 8)

Windows Store app

Not applicable

UltraEdit

Not applicable17.20.1016

Microsoft Word

2-16

Edition/ModeData Loss Prevention - Supported Applications

Application

Edition/Mode

VersionWindows Command
Prompt (COPY and MOVE
commands)

Not applicable

Any version compatible withthe host machine's
operating system

Windows Explorer

Not applicable

Any version compatible withthe host machine's
operating system

Windows Notepad

Not applicable

Any version compatible withthe host machine's
operating system

Windows Wordpad

Not applicable

Any version compatible withthe host machine's
operating system

Synchronization Software (ActiveSync)
Important
The following table lists synchronization software tested by Trend Micro. Trend
Micro cannot be held responsible for any damage or loss of data that may occur
through the use of any untested software.
•

Microsoft ActiveSync™ 4.5•

Windows Mobile Device Center
The required Windows Mobile Device Center version depends on theendpoint's operating system. For more information, visit the Microsoft
website.

2-17

Trend Micro Data Protection Lists

Webmail
Important
The following lists web-based email services tested by Trend Micro. Trend
Micro cannot be held responsible for any damage or loss of data that may occur
through the use of any untested services.
•

•

2-18

Web sites:•

mail.google.com•

mail.yahoo.com•

outlook.live.com•

outlook.office.com•

outlook.office365.com

OWA (Outlook on the web):•

OWA/Exchange 2007•

OWA/Exchange 2010•

OWA/Exchange 2013•

OWA/Exchange 2016

Chapter 3

Device Control - Supported Device
Models•Supported Device Models on page 3-2•

Obtaining the Support Properties for a Device on page 3-6

3-1

Trend Micro Data Protection Lists

Supported Device Models
To determine whether Device Control can manage your devices, you mustverify that Device Control supports the Class Guid of your installed devices.
You can locate the Class Guid using Windows Device Manager.
The following table outlines the mapping between device types, Device
Manager, and Device Control, and the support conditions for each device
type.
For more information on locating the “Class Guid”, “Device instance path”,
and “Parent” values, see Obtaining the Support Properties for a Device on page
3-6.
DeviceControl Device Type

DeviceManager Device Type

Supported Class Guid

Additional Requirements

Storage Devices

3-2

CD/DVD

DVD/CD-ROM
drives{4D36E965-E325-11CEBFC1-08002BE10318}-

Floppy disks

Floppy disk
drives{4D36E980-E325-11CEBFC1-08002BE10318}-

Floppy drive
controllers{4D36E969-E325-11CEBFC1-08002BE10318}-

Device Control - Supported Device Models

DeviceControl Device Type

DeviceManager Device TypeUSB storage
drivesDisk drives

Network
drivesNotapplicable

Supported Class Guid
{4D36E967-E325-11CEBFC1-08002BE10318}

Not applicable

Additional Requirements•

The Device instancepath value DOES NOT
begin with “SCSI\DISK”
or “IDE\DISK”.

•

The Device instancepath value DOES begin
with “SCSI\DISK” andthe Parent value (in theProperty drop-downlist) begins with “USB
\VID_”.

•The Device instancepath value DOES begin
with “SCSI\DISK” andalso includes“VEN_02MICRO”, and
the Parent value (in theProperty drop-downlist) begins with “PCI
\VEN_”.

Not applicable

Mobile Devices

3-3Trend Micro Data Protection Lists

DeviceControl Device Type

DeviceManager Device Type

Mobiledevices /Storage

Universal
Serial Bus
controllers

Supported Class Guid
{4F919108-4ADF-11D5-882D-0
0B0D02FE381}-{3F966BD9-FA04-4EC5-991CD326973B5128}-{F72FE0D4CBCB-407D-8814-9ED673D0D
D6B}-{17FDD8F0-53DF-406F-8287-8
C38F6FC9BCC}-{8801E650-78DB-4711A6E1-8C23B216928A}-{36FC9E60C465-11CF-8056-4445535400
00}

Verify that at least one of theCompatible Ids values
begins with “USB\” and that
the USB Class Code is “06”.

{88BAE032-5A81-49F0-BC3DA4FF138216D6}
Portable
Devices
Non-Storage Devices

3-4

Additional Requirements{EEC5AD98-8080-425F-922ADABF3DE3F69A}-Device Control - Supported Device Models

DeviceControl Device Type

DeviceManager Device Type

Bluetooth
adapters

Bluetooth /BluetoothRadiosSupported Class Guid

Additional Requirements{E0CBF06C-CD8B-4647BB8A-263B43F0F974}-{F12D3CF8-B11D-457E-8641BE2AF2D6D204}-{95C7A0A0-3094-11D7A202-00508B9D7D5A}-{D76B962BF0B8-41F2-8590-6605FE4EA3
12}-{7240100F-6512-4548-8418-9
EBB5C6A1A94}-

COM and LPT
ports

Ports (Com &LPT){4D36E978-E325-11CEBFC1-08002BE10318}-

IEEE 1394
interface

IEEE 1394
Bus host
controllers{6BDD1FC1-810F-11D0BEC7-08002BE2092F}-

Imagingdevices

Imagingdevices{6BDD1FC6-810F-11D0BEC7-08002BE2092F}-

Infrareddevices

Infrareddevices{6BDD1FC5-810F-11D0BEC7-08002BE2092F}-

ModemsModems{4D36E96D-E325-11CEBFC1-08002BE10318}-

PCMCIA cards

PCMCIA
adapters{4D36E977-E325-11CEBFC1-08002BE10318}-

Print screen
key

Not
applicableNot applicableNot applicable

3-5Trend Micro Data Protection Lists

DeviceControl Device Type

DeviceManager Device Type

Wireless NICs

Network
adapters

Supported Class Guid
{4D36E972-E325-11CEBFC1-08002BE10318}

Additional Requirements
Verify that at least one of theCompatible Ids values
begins with “USB\” and that
one of the following
conditions is true•

The “Class_” value is“02” or “0a”.

•

The “Class_” value is“e0” and the“SubClass_” value IS
NOT “01”.

•

The “Class_” value is“e0”, the “SubClass_”value IS “01”, and the“Prot_” value IS NOT“03”.

Obtaining the Support Properties for a Device
To determine whether Device Control can manage your devices, you mustverify that Device Control supports the Class GUID of your installed devices.
You can locate the Class GUID using the Windows Device Manager.
Note
The following instructions indicate how to locate the necessary device
information using Device Manager in Windows 10. The steps may change basedon your Windows version. Refer to your Windows documentation for detailed
information about using Device Manager.

Procedure
1.
3-6

Go to Device Manager.

Device Control - Supported Device Modelsa.

On your Windows 10 endpoint, open File Explorer.

b.

Right-click This PC and click Properties.

c.

In the panel on the left, click Device Manager.

2.

Locate and select the device in the tree that you want to check.

3.

Right-click the device and click Properties.

4.

Click the Details tab.

5.

In the Property drop-down list, select Class Guid.

6.

Check whether the displayed Class Guid exists in the supported devicelist.
For more information, see Supported Device Models on page 3-2.

7.

8.

For the Disk drives devices in Device Manager (USB storage devices in
Device Control), you must also:a.

In the Property drop-down list, select Device instance path.

b.

Verify that at least one of the following conditions is true:•

The Device instance path value DOES NOT begin with “SCSI\DISK” or “IDE\DISK”.

•

The Device instance path value DOES begin with “SCSI\DISK”
and the Parent value (in the Property drop-down list) begins
with “USB\VID_”.

•

The Device instance path value DOES begin with “SCSI\DISK”
and also includes “VEN_02MICRO”, and the Parent value (inthe Property drop-down list) begins with “PCI\VEN_”.

For the Universal Serial Bus controller devices in Device Manager(Mobile devices in Device Control) with the Class Guid = “{36FC9E60C465-11CF-8056-444553540000}” or “{88BAE032-5A81-49F0-BC3DA4FF138216D6}”, you must also verify the following:a.

In the Property drop-down list, select Compatible Ids.
3-7

Trend Micro Data Protection Lists

b.
9.

3-8

Verify that at least one of the values begins with “USB\” and that the“Class_” value is “06”.

For the Network adapters devices in Device Manager (Wireless NICs in
Device Control), you must verify the correct “Class Guid” and also:a.

In the Property drop-down list, select Compatible Ids.

b.

Verify that at least one of the values begins with “USB\” and that oneof the following conditions is true:•

The “Class_” value is “02” or “0a”.

•

The “Class_” value is “e0” and the “SubClass_” value IS NOT
“01”.

•

The “Class_” value is “e0”, the “SubClass_” value IS “01”, and the“Prot_” value IS NOT “03”.

Disclaimer
The information provided herein is for general information and educational
purposes only. The list is not intended to be exhaustive but merely an
overview of relevant, common and useful forms or types of identification,predefined expressions or acronyms. It is not intended and should not be
construed to constitute legal advice. The information contained herein may
not be applicable in all situations and may not reflect the most current
situation. Nothing contained herein should be relied or acted upon without
the benefit of legal advice based upon the particular facts and circumstancespresented and nothing herein should be construed otherwise. Trend Microreserves the right to modify the contents of this document at any time
without notice.
Although Trend Micro uses reasonable efforts to include accurate and up-todate information herein, Trend Micro makes no warranties orrepresentations of any kind as to its accuracy, currency or completeness. You
agree that access to and use of and reliance upon this document and thecontent thereof is at your own risk. Trend Micro disclaims all warranties ofany kind, express or implied. Neither Trend Micro nor any party involved increating, producing or delivering this document shall be liable for any
consequences, losses, or damages, including direct, indirect, special,consequential, loss of business profits or special damages, whatsoever
arising out of access to, use of or inability to use, or in connection with theuse of this document, or any errors or omissions in the content thereof. Useof this information constitutes acceptance for use in an "as is" condition.

iIndexIN-3