Features
Everything Apivom Virtus can do: the full feature catalog, with what each feature does and how it fits into the Apivom platform.
Personal data detection on WhatsApp Business
Inbound and outbound messages on the lines you enrol are checked about every minute for personal data, with no app to install on anyone’s phone.
Virtus reads the text of messages on the WhatsApp Business lines connected to Apivom, in both directions, and checks it about every minute. A message is checked once, and a finding is added for each piece of personal data it contains.
Because the messages already flow through your Apivom connection, there is nothing to roll out to phones or computers.
Scanning only covers lines an admin has enrolled, and only messages that arrive after the enrolment.
Identifiers from Türkiye, the UAE, the EU, the UK and the US
Checksum-validated national identifiers and the common data types, so order numbers and timestamps are not mistaken for personal data.
Virtus detects e-mail addresses, phone numbers, IBANs, payment cards and IP addresses, plus national identifiers. For Türkiye it recognises the national ID, the tax number and the licence plate. It also covers the UAE Emirates ID, US Social Security, driver licence, passport, ITIN and bank numbers, and identifiers from the UK, Germany, Spain, Italy, Poland, Finland and Sweden.
Where a number has a check digit, Virtus validates it, and some types need a nearby cue such as “tax number”, so reference numbers and tracking codes are left alone.
Privacy regimes and risk tiers
KVKK, GDPR, UK GDPR, UAE PDPL and CCPA, merged so the strictest rule wins, under a Light, Standard or Elevated risk tier.
Pick the regimes that apply to you. Virtus merges them into one policy: the detector set is the union, and retention can only be raised up to the longest period every selected regime allows.
A risk tier then sets how often access is reviewed, which assessment you need before scanning, and who owns privacy. Light is the smallest set of duties, Elevated the strictest.
Every change to regimes, retention or tier is written to the audit trail.
Findings, triage and masked excerpts
A finding holds the type, position and time, never the value. Triage them, and reveal an opt-in masked excerpt only when you need it.
The findings list can be filtered by line, data type, regime and status. Each finding can be marked open, confirmed, false positive or resolved, and each change is recorded with who made it.
By default no value and no message text is stored. On the Elevated tier you can switch on masked excerpts: a short window around the finding with every detected value replaced by its type, encrypted, expiring on its own, and opened only with an audit entry.
Draft privacy documents from your settings
A downloadable pack filled from your regimes, retention and tier, with the parts you must complete left in square brackets.
Download a draft document pack that follows what you configured: a description of the processing, a sheet for each selected regime, a checklist for your risk tier, a privacy notice in English and Turkish, and a legitimate-interest balancing test.
The drafts are not legal advice and have not been reviewed by counsel. Parts that only you can complete are left in square brackets, and each download is recorded in the audit trail.