Detecting sensitive information in records using context and decoys

Aspects of the present disclosure provide techniques for detecting sensitive information. Embodiments include determining a first likelihood that a record contains at least a given type of sensitive information using a first detection technique that involves providing one or more inputs to a machine learning model based on the record and receiving the first likelihood as an output from the machine learning model based on the one or more inputs. Embodiments include determining a second likelihood that the record contains at least the given type of sensitive information using a second detection technique comprising a search of the record. Embodiments include applying a policy to determine whether the record contains sensitive information based on the first likelihood and the second likelihood. Embodiments include performing one or more actions based on whether the record contains sensitive information.