Aadhaar handling: masking, and what you should never store
APIZONE
·
·updated 8 Sep 2026 ·
1 min read
Aadhaar data carries specific handling obligations. The safest posture is to verify a linkage or a reference and store as little as possible.
On this page
Prefer linkage checks over the number
For most use cases you do not need to store an Aadhaar number. You need to know that a PAN is Aadhaar-linked, or that a bank account is Aadhaar-seeded. Verify the linkage, store the boolean and the date, and you have sidestepped most of the obligation.
If you must reference it, mask it
Where a reference is unavoidable, store only a masked form (last four digits) plus a one-way hash for matching. Never log the full number. Never display it in a support tool.
Access and retention
Restrict any Aadhaar-adjacent field to the smallest set of roles that need it, log every access, and delete on account closure per your retention schedule.