How the roll-up gate works
This tool grades a document set for exposed PII before you share it. It reads 5 documents and rolls them into one verdict — the worst, never the average — then a gate that can only make it worse.
The 5 documents
One unhandled SSN, card, bank detail, or health marker makes that document DO NOT SHARE regardless of its coverage percentage - and one DO NOT SHARE document holds the entire library at HOLD, whatever the average coverage reads.
Why: Two of five documents are clear and one only needs a redaction pass on low-risk fields - but the customer file and the intake form each still have an open SSN. One open high-sensitivity finding is enough to make its document DO NOT SHARE, and library status is the worst document, never the average, so it reads HOLD at 67% average coverage.
No single document is the crisis — the clustering is. The roll-up takes the worst, the gate escalates when trouble compounds, and it names the one thing to fix first. Flags fixed-pattern matches in the text you scan; it does not redact for you and does not guarantee every PII type is caught. Confirm handling rules with your privacy or compliance owner.