Paste text (emails, credit cards, API keys, PEM…). It is analyzed as a pure function on the server and nothing is stored. Cards are validated with the Luhn algorithm — the same logic as the OS's dlp-scan (T1041).