Platform
See where personal data lives
An inventory of systems and fields, built from the catalogs you already run. Records stay in your network. Further connectors can be added.
Inside your network
- 01Catalog already there
- 02Locate stores and fields
- 03Classify personal data
- 04Confirm an exact lookup
Inventory
customers.email
Contact identifier. Indexed for rights. Rows stay put.
Locate, classify, confirm
First find the stores. Then name the personal data. Then mark what a rights request can look up exactly. A guess is not filed as found.
Step 1
Locate
Looks at: The catalogs and stores you already run
Produces: An inventory of systems and fields. Not a copy of the rows.
Step 2
Classify
Looks at: Which fields hold personal data
Produces: Labels the fiduciary can act on: contact, financial, child.
Step 3
Confirm
Looks at: Whether a rights lookup can hit an exact key
Produces: A list ready for access and erasure. Guesses are not filed as found.
Your network keeps the records
The control plane holds names of systems and fields. It does not take a copy of the rows.
Your network
Where the data lives
Databases, warehouses, and files stay on your side. Row values are not shipped out to build the inventory.
Control plane
What we keep
Names of systems and fields, classification, and the work to run next. Not a copy of the records.
Connectors today
Live types on the moving rail. Records stay in your network.
PostgreSQL
MySQL
Oracle
SQL Server
Snowflake
BigQuery
AWS Glue
Unity Catalog
Amazon DataZone
MongoDB
DynamoDB
Azure Cosmos DB
Elasticsearch
Redis
Amazon S3
Apache Kafka
Salesforce
- ServiceNow
- Workday
SharePoint
SAP
Zendesk
AWS
Azure
GCP
Kubernetes
CloudWatch Logs
CloudTrail
Azure Log Analytics
Azure Activity Log
GCP Cloud Logging
GCP Audit Logs
AWS Backup
Azure Recovery Services
GCP Backup
Further systems
Further stores use the same inventory. They are not claimed as live until they are connected on an estate.
MariaDB
IBM Db2
Azure SQL
Amazon Redshift
Azure Synapse
- Teradata
- ClickHouse
- Apache Hive
Databricks
Amazon Athena
Google Cloud SQL
- Trino
- Apache Iceberg catalogs
Cassandra
- Couchbase
Neo4j
Firebase
- Supabase
Azure Blob Storage
Google Cloud Storage
- MinIO
- Box
Google Drive
OneDrive
Amazon Kinesis
Azure Event Hubs
Google Pub/Sub
- Apache Pulsar
HubSpot
Shopify
- Intercom
- Freshdesk
Jira
Confluence
Slack
Microsoft Dynamics
Oracle Fusion
Under the DPDP Act
- Reasonable security. Safeguards start with knowing which fields hold personal data and who can reach them.
- Rights. Access and erasure use exact lookups. A sampled search that misses a row is not a completed request.
Data discovery questions
No. Discovery builds an inventory of systems and fields. The records themselves stay where they already are.
A live list of where personal data sits, how it is classified, and whether a rights request can look it up exactly. It is not a spreadsheet of system names someone typed last year.
Relational databases, warehouses, catalogs, NoSQL, object storage, streams, major SaaS, cloud inventory, logs, and backup vaults. Further systems can be added without changing how the inventory is read.
Related guides
What is DPDP?
The Digital Personal Data Protection Act 2023, who it applies to, and penalties.
DPDP compliance
Obligation domains, a practical compliance path, and how Indian organisations operationalise the Act.
Cookie consent
Two banner layouts now. More can be added. Block until grant.
Policy and notice
Privacy notice and cookie policy today. More notice types can be added.
Consent management
Purpose grant, withdrawal, and a record you can produce later.
Infrastructure posture
Cloud and code, seen as a privacy duty. More estates can be added.
DPDP platform
Consent, scanning, DSAR automation, and AI governance in one compliance platform.
Data lineage
How data moved, and which stores are still unknown.