Data Collection

Spec automatically surfaces, normalizes, and stores identity data in real-time from the web and API traffic it monitors. The identity graph this feeds is private to each Spec customer and used to power real-time risk detection for fraud, bots, and abusive agentic browsing.

What Data is Collected?

Customers can disable the collection of any data element, though this can have a negative effect on detection performance.

Data collection is opportunistic. Spec automatically monitors traffic in real time in order to surface the hundreds of different data elements that enable our detections.

These data elements fall into 11 distinct categories:

Data Category	Example Data
Emails	Buyer Email Seller Email Merchant Email
Physical Addresses	Billing Address Shipping Address Merchant Address
IP Addresses	Connection IP Address Proxy IP Address DNS IP Address
Identifiers	Username Account Number TID (hashed) EIN (hashed) SSN (hashed)
Tokenized Payment Methods	Tokenized CC Tokenized Pay-to Bank Tokenized Pay-from Bank
Request Metadata	URI User Agent Private Browsing Plugin Hash Request Headers
Phone Numbers	Billing Phone Number Shipping Phone Number
Order Data	Product Sku Product Qty Product Price Product Category Cart Total Transaction Amount Cart Items Discounts Applied Order Number Order Status Refund Amount Refund Reason Shipping Method
Payment Gateway Data	Transaction Status Transaction Reason Code Dispute Reason Payment Type
Authentication Data	Session Token Sign-in Method
Device Data	Device Fingerprint JS User Agent Device location Device firmware version Device sensor data