Discover sensitive data
Identify personal, health, financial, account, authentication, transaction, session, and device data in observed requests.
- PII, PHI, and account data
- Credentials and authentication
- Session and device identifiers
Sensitive data discovery
See what sensitive dataactually leaves.
Trace sensitive fields from the initiating journey to every observed recipient.
Product evidence
PII + PHIdata categories
Raw + transformedvalue visibility
Request contexttraceable evidence
Decision view
An inventory says what exists. The transfer shows who received it.
Connect each field to its request, transformation, recipient owner, jurisdiction, and downstream path.Observed fieldForm in transitRecipient path
Email addressRaw and hashedForm to CRM to identity service
Account IDPlaintextAccount page to analytics
Session IDCookie and queryBrowser to analytics to ad platform
Recognize transformed values
Connect raw values with hashed, encoded, concatenated, and otherwise transformed forms that remain linkable across recipients.
- Hash and encoding recognition
- Cross-domain linkability
- Field-level sensitivity
Resolve every recipient
Attribute each destination to the company, vendor role, party depth, geography, and downstream relationship behind it.
- Recipient ownership
- First- through nth-party depth
- Location and sovereignty
Preserve decision-ready context
Keep each finding connected to what initiated the transfer, what moved, who received it, and what changed over time.
- Initiator context
- Redacted request evidence
- Historical change record
Data Risk Review
Discover the sensitive-data paths the inventory misses.
Start with one domain, application, or customer journey.
Review sensitive data movement Start with one public application, customer journey, or domain.