Paste text (emails, credit cards, API keys, PEM…). It is analyzed as a pure function on the server and nothing is stored. Cards are validated with the Luhn algorithm — the same as the OS DLP (T1041 mitigation).