It might make sense to support (or replicate) Google's DLP functionality. I think that feature is just a blacklist of certain regular expressions.

Cool product, by the way!