This form uses Arcjet's sensitive info detection feature which is configured to detect credit card numbers. It can be configured to detect other types of sensitive information and custom patterns.
The request is analyzed entirely on your server so no sensitive information is sent to Arcjet.
The API route imports a centralized Arcjet client which sets base rules.