Aadhaar masking software · API · on-premise

Mask Aadhaar numbers
in every copy you hold.

Maskly finds Aadhaar cards in photos, scans and PDFs and masks the first 8 digits and the QR code automatically, keeping the last 4 for matching. Run it through an API, on your own servers or inside DocVault, for new uploads and for the archives you already hold.

An Aadhaar number travels further than it should: KYC copies, email attachments, shared folders. Maskly lets you keep the document and lose the risk.

Why Aadhaar masking matters

Holding a full Aadhaar number
is a liability.

Every unmasked copy in a KYC file, a loan folder or an inbox is personal data you must protect. Masking the first 8 digits keeps the copy useful and removes most of the risk.

RBI KYC directions

RBI's KYC Master Direction asks regulated entities to ensure the Aadhaar number on a submitted copy is redacted or blacked out where Aadhaar authentication isn't required.

The masked Aadhaar format

A masked Aadhaar shows only the last 4 digits. That's the format Maskly produces: the first 8 digits and the QR code are covered, the last 4 stay readable.

DPDP Act, 2023

India's data protection law expects reasonable security safeguards for personal data. Keeping less of it, in masked form, is one of the simplest.

General information, not legal advice. Your compliance team decides what your organisation must mask and keep.

Six steps, a few seconds

Follow one card
from upload to gone.

Each step hands its result to the next. Nothing is written to disk on the way, and the original is deleted once you have your copy.

STEP 01 · UPLOAD

A document arrives, and is checked before anything else.

A phone photo, a scan or a PDF, from your application, a DocVault folder or an archive. Before any masking starts, the file is checked for what it really is, not what its name says.

  • JPG, PNG, PDF and TIFF, photos and scans alike.
  • Real type checks: the file's content decides, so a renamed text file is refused.
  • Damaged or oversized images are refused, safely, before they are processed.

A valid image moves on to be read.

STEP 02 · FIND THE CARD

It straightens the photo and finds the card.

Photos come in sideways, upside down or at an angle. Maskly corrects the orientation and skew, then locates the Aadhaar card and its QR code in the image.

  • Rotation and skew are corrected first.
  • Card detection with a trained vision model finds the card even inside a larger document.
  • QR code detection runs alongside, because the QR holds personal details too.

With the card found, the number can be read.

STEP 03 · READ THE NUMBER

It reads the number, so it masks the right thing.

Text recognition reads the card and picks out the 12-digit Aadhaar number, printed across or down the card. A card that is already masked is recognised and left alone.

  • Two text-recognition engines read the card.
  • Horizontal and vertical number layouts are both handled.
  • No card, no change: an image without an Aadhaar number comes back unchanged.

Now the masking itself.

STEP 04 · MASK

The first 8 digits go. The last 4 stay.

The first eight digits are covered with a solid block, in the format of a masked Aadhaar. The last four stay readable so the card can still be matched to a person. The QR code is covered completely.

  • 8 of 12 digits hidden, the last 4 kept.
  • QR code masked as well.
  • Same format back: a JPEG comes back as a JPEG, a PNG as a PNG.

The masked copy goes back where it came from.

STEP 05 · DELIVER

The masked copy goes straight back to your system.

Your application collects the masked image through the API, or DocVault replaces the stored file with its masked version. Through the API, each result is released once, to the request that made it, then erased.

  • Same file, masked: the format and layout are preserved.
  • Single-use results, tied to the request that made it.
  • A clear result for every file: masked, no Aadhaar found, or why it was skipped.

And then it's forgotten.

STEP 06 · FORGET

Nothing to leak, because nothing was kept.

Your image is held in memory only, never saved to disk or a database. We never store the Aadhaar number, your file name, or anything read from the card. An audit log records each request, never its content.

  • No image storage: memory only, erased once the result is collected.
  • No numbers stored: not the full number, not the last four.
  • An audit log: time, source, file type and size, outcome.
8/12

digits hidden; the last 4 stay readable

QR

code masked too, since it carries personal details

CPU

only: no GPU needed, runs on ordinary servers

0

images, numbers or file names stored

Deployment

Wherever your
documents live.

On request

On your own servers

The masking engine runs as a container in your data centre or cloud account, with a REST API your applications call. Images never leave your network, and it runs on ordinary CPUs.

Talk to us

Available

Inside DocVault

Built into DocVault document management: files are masked automatically in chosen folders at upload, as a workflow step, or on demand.

Available

Bulk masking of existing archives

Mask the scans you already hold. Bulk jobs in DocVault run over whole folders, mask every stored version, and report each skipped file with the reason.

Planned

Hosted API

Accounts, PDFs and batches through our hosted service, sized to your volume. The same request–status–download API already runs our online trial.

See the roadmap

See the integration for yourself. The free trial walks through the API flow your systems would use: a key, an upload, the status and the masked result, with access rules applied.

Try it free
Who it's for

Anyone holding copies
of Aadhaar cards.

Banks, NBFCs and fintechs

KYC copies and loan files keep the last four digits for matching, without the full number.

Insurers and hospitals

Claim and patient files can carry the card without carrying the risk.

Employers and HR teams

Onboarding folders full of ID proofs, masked before they're shared or archived.

Property and rentals

Agreements and tenant verification files sent around by email.

Government and education offices

Applications and admission files where only the last four digits are needed.

Outsourcers and BPOs

Partner and back-office files that pass through many hands, masked before they travel.

Masking helps you keep less personal data. Whether you may hold an Aadhaar copy at all is a separate legal question for your compliance team.

Talk to us

Mask every copy
you hold.

Tell us your volumes and where the images must stay. We'll size Maskly for you and show it on your own documents.