Detects PII (emails, phones, SSNs, credit cards) in any text with character spans. Compliance agents use this before processing user data.