Unnoticed sharing
Identity, contact or financial information left inside a document can be shared inside or outside the organization without anyone noticing.
ISDD | AI-Powered Automatic Document Masking
Automatic Document Masking Software Automatically find, mask and securely manage personal data under KVKK (Turkish Personal Data Protection Law)
Developed on PaperWorkAI, ISDD (Intelligent Sensitive Data Discovery) uses AI to automatically detect and mask personal data in electronic documents and image files, and secures document access based on each user’s permissions.
When a document is opened, authorized users can see the information they need, while users without permission see the same document masked. Organizations manage document-level sensitive data security with a centralized, automated structure.
Document security · Automatic masking
Customer Information Form
Masked- Full NameMehmet Yılmaz
- National ID12345678901
- Phone0555 123 45 67
- Emailmehmet@example.com
- AddressAtatürk Mah. No:45
- Scan
- Image
- E-document
Note: The same document looks different depending on the user’s permissions. People who do not need the data do not see the sensitive fields.
- Personal data is protected when the document opensEven if an unauthorized user accesses the document, they see the sensitive fields masked.
- Masking does not depend on human attention aloneFields such as full name, national ID number, phone, address, email and IBAN are detected with AI.
- Organizations define their own sensitive termsExpressions specific to your industry or internal policy can also be included in masking.
Problems it solves
Personal data risk often hides inside documents.
In their KVKK work, organizations mostly focus on databases. Yet contracts, HR documents, customer forms, invoices, application files and email attachments circulating in daily workflows can carry just as much sensitive data.
Unauthorized access
An employee with the right to access a document can also see personal data on the same screen that they should not see.
Scattered applications
Building document security separately in ERP, CRM, HR and legal applications becomes costly over time.
Manual review burden
Opening and checking thousands of documents one by one is not sustainable. As workload grows, so does the risk of error.
High operational burden, penalties, reputational damage and audit risk in KVKK compliance
ISDD in action
A document arrives, and AI finds the sensitive fields.
ISDD turns masking from a control step that gets forgotten after a document is created into an automatic part of the flow. Analysis starts as soon as the document reaches PaperWork or is sent through the service.
Detected fields
- Full name
- National ID
- Phone
- Address
- IBAN
- Custom term
Centralized document masking
No need to set up masking separately in every application.
In organizations, documents are not created in a single place. HR documents may come from HR systems, invoices from ERP, customer files from CRM, contracts from legal processes and application forms from portals.
Masking separately in each application is both costly and hard to manage. And as systems multiply, data security control weakens. ISDD works with PaperWork Document Management to analyze and mask documents centrally.
- Works seamlessly with PaperWork Document Management and Content Server.
- Can be called as a service; other applications send the document and receive the masked output.
- Manages documents from systems such as ERP, CRM, HR, SAP, legal and customer portals in one central place.
The result: lower operational burden, stronger KVKK compliance, more secure document access and centralized control.
Capabilities
Document security built into everyday work.
ISDD protects personal data not only in the archive, but also when documents are opened, shared and used across different applications. Because masking rules, user permissions and the document source work together, security becomes a natural part of daily work.
Works regardless of document type
Works on Office documents (Word, Excel and PowerPoint), PDFs, scanned documents and image files. Even when documents come from different sources, the masking approach stays the same.
Permission-based visibility
The same document is shown differently based on the user’s role. People who do not need sensitive data see the part of the document required for their work; personal fields are masked.
Centralized control
Documents from different applications are analyzed in one central place. Even as the number of applications grows, the masking standard stays consistent.
Custom term definitions
Organizations can add terms they consider sensitive for their industry. ISDD treats these terms like personal data.
Use as a service
ISDD can work inside PaperWork and can also process documents from other applications as a service. The application sends the document, ISDD masks the personal data and returns a secure output. A shared masking service can be used without changing the existing application architecture.
Why ISDD?
Plug-and-play setup: ISDD is a flexible, practical solution that can be rolled out quickly. It can start working without long customization projects.
- Strengthens KVKK compliance
- Reduces penalty and security risk
- Offers a centralized document masking approach
- Works inside PaperWork or as a service
- Integrates with ERP, CRM, HR and other enterprise applications
- Goes live quickly with a plug-and-play setup
- Reduces manual review and masking work
- Offers flexibility with custom term definitions
Use cases
The same risk shows up in different documents in every department.
ISDD automates document security in departments where documents containing personal data circulate heavily. The goal is not just to store the document, but to present it to the right person with the right visibility.
Reduces unnecessary visibility in personnel files.
HR documents can contain fields such as identity, address, phone, family information, bank account and signature in the same file. ISDD detects these fields within the document; the HR officer sees the required data in clear, while other users involved in the process see the sensitive fields masked.
How does the flow work in this scenario?
- 1Personnel document is uploadedA PDF, scan or electronic document reaches PaperWork.
- 2Sensitive fields are foundIdentity, contact and bank details are flagged automatically.
- 3Displayed by roleUsers without permission work with the document through a masked view.
Provides controlled access to contracts and case files.
Documents that legal teams work with can contain party information, addresses, identity data and expressions the organization considers confidential. ISDD does not leave security to folder permissions alone; it also manages the sensitive fields inside the document.
How does the flow work in this scenario?
- 1Contract or file is savedThe document is archived or created during an approval process.
- 2Custom terms are definedTerms the organization considers confidential are added to the masking list.
- 3Sharing becomes secureThe file opens without unnecessary exposure of personal data.
Protects financial data in invoices and payment documents.
Finance documents can contain IBANs, tax information, signatures, and customer and supplier details. ISDD finds these fields automatically and provides controlled visibility during archiving, approval and sharing.
How does the flow work in this scenario?
- 1Invoice or receipt arrivesThe document comes from ERP, email or the supplier portal.
- 2Sensitive financial data is detectedIBAN, contact details and defined expressions are captured.
- 3The right view is shown to each personInformation needed for approval is kept; unnecessary data is masked.
Keeps data sharing in customer documents under control.
Application forms, request attachments, identity documents and customer correspondence come in through different channels. By masking these documents centrally, ISDD prevents customer data from circulating uncontrolled between teams.
How does the flow work in this scenario?
- 1Customer document enters the systemA portal, CRM, email or call center process forwards the document.
- 2Personal data is found automaticallyIdentity, address, phone and application-specific expressions are flagged.
- 3Teams work with a secure documentOperational needs are met while unnecessary data exposure is reduced.
Why should you use ISDD?
Because in most organizations, personal data risk hides in documents nobody notices.
ISDD manages this risk automatically at the document level. It finds personal data with AI, masks it based on user permissions, provides centralized document security and strengthens the organization’s KVKK compliance processes.
Stop checking documents one by one. Secure sensitive personal data automatically with ISDD.
FAQ
Frequently asked questions about ISDD
We have gathered the key questions about masking, user permissions, document types and integration in one place.
What is ISDD?
ISDD is an AI-powered automatic document masking solution developed on PaperWorkAI. It detects personal data in electronic documents, PDFs, scanned documents and image files, and masks it based on the user’s permissions.
What problem does ISDD solve?
It reduces the risk of personal data in documents being viewed or shared unnoticed, or becoming accessible to unauthorized people. It eliminates the need for manual masking and provides centralized, automatic document security.
How does ISDD support KVKK compliance?
By automatically detecting and masking personal data in documents, it helps prevent unauthorized viewing. This makes organizations’ personal data security, access control and audit processes more systematic.
Does ISDD completely eliminate the risk of penalties?
By preventing sensitive personal data in documents from being exposed uncontrolled, ISDD helps significantly reduce penalty and compliance risk. However, KVKK compliance requires many elements to be managed together, including processes, policies, authorization, records management and audits.
Which document types does it work with?
It can be used on Office documents (Word, Excel and PowerPoint), PDF files, scanned documents, image files and documents coming from various enterprise applications.
Are documents shown the same way to every user?
No. ISDD can show documents masked or unmasked based on the user’s permissions. Users who are not authorized to see personal data view the document in masked form.
Can a company add its own custom terms to the masking scope?
Yes. Organizations can define terms they consider sensitive due to their industry or internal policies. ISDD treats these terms like personal data and masks them automatically.
Does ISDD only work inside PaperWork?
No. ISDD can work as part of the PaperWork platform and can also be used as a service. It can receive documents from different applications, mask them and send the result back to the relevant system.
What are the advantages of centralized document masking?
Instead of masking separately in different applications, documents are analyzed and masked in one central place. This approach reduces operational workload, increases control and creates a sustainable KVKK compliance structure.
Resources
Related success stories and articles
Success storyGemak Gemi İnşaat starts using PWQMS for quality management
Success storyİzmir Demir Çelik starts using PWQMS
Success storyAyen Enerji Chose PaperWork to Increase Operational Agility and Accelerate Digital Transformation in Its Corporate Processes
BlogPaperWork Document Management and Content Server: Bring All Your Documents Together in One Place and Access Them from Any Application
BlogSee Risks with PWGRC. Plan Audits Right. Drive Actions to Completion.
BlogA New Era in Quality Management with PWQMS: Quality Now Lives in the Field, in the Process and at the Heart of Management
Contact Us
Stop checking documents with personal data one by one.
With ISDD, automatically find sensitive data, mask it based on user permissions and manage documents from different applications in a centralized structure. Review your organization’s document sources, permission structure and masking needs together with the PaperWork team.
Call us(+90) 216 384 0751
What happens next?
- 01
We find a time that suits you.
- 02
We hold an introductory meeting.
- 03
We run a demo tailored to you.