Skip to content
Espresso Data Privacy
EN
Request a demo

Data Discovery

Know where personal data is stored

Data Discovery scans file storage, databases, Microsoft 365 and AI platforms for personal data – with rules for Swiss and European identifiers, local detection of names and addresses and text recognition for scanned documents. The search runs in your environment; the data never leaves your premises.

Request a demo All modules
ESPRESSO Dashboard Scan Reports Actions Export Configuration DashboardSources6Runs18Total findings12,846Alerts671Open actions9 Risk view by source SourceRiskHitsCustomer masterPostgreSQL high5,120Contract file shareFile system high4,380Customer service mailboxesMicrosoft 365 medium2,210ClaimsSQL Server low986 Recommendations by source2 high-risk sources: Customermaster, Contract file shareCustomer service mailboxes:check findings with health data9 open actions, 2 of themoverdue
Simplified view with sample data.

Where Data Discovery searches

Data Discovery only reads. It changes nothing in the sources, and it stores the location and masked matches, not the content.

  • File storage

    Files and folders in a connected file store – including scanned PDFs and images, thanks to text recognition.

  • Databases

    PostgreSQL, MySQL and MariaDB as well as Microsoft SQL Server.

  • Microsoft 365

    SharePoint and OneDrive, mailboxes and Microsoft 365 Copilot.

  • AI platforms

    Stored data from the use of Claude, via Anthropic's compliance interface.

What Data Discovery detects

Rules detect identifiers with a fixed structure, while local detection finds names and addresses in free text. Custom search patterns add whatever is specific to your organisation.

Identifiers

  • AHV number
  • IBAN
  • Credit card numbers
  • ID document numbers
  • Insurance numbers
  • national social security, tax or personal identification numbers from eight European countries

Person and contact

  • Names
  • Addresses
  • Dates of birth
  • Email addresses
  • Phone numbers
  • Employee numbers

Sensitive personal data

Indications of the categories defined in data protection law

  • Health
  • Religion
  • political views
  • Trade union
  • Intimate sphere
  • Criminal and administrative proceedings
  • Social assistance
  • ethnic origin
  • genetic and biometric data

Custom patterns

  • Customer, contract and policy numbers
  • Keywords for weighting
  • Exclusions to prevent false positives

From finding to action

  1. 1

    Search

    You decide which sources are scanned and how thoroughly – including with text recognition and custom search patterns.

  2. 2

    Review

    Confirm findings or permanently suppress them as false positives – subsequent runs take this into account.

  3. 3

    Compare

    See what has been added or has disappeared since the last run.

  4. 4

    Act

    Create and track actions with deadlines, plus reports for IT, data protection and internal audit.

What you keep in view

  • Risk per source

    Which source contains how much personal data and how sensitive it is.

  • Overdue data

    Alerts for data older than the defined retention period.

  • Access rights

    Optional: who can access SharePoint, OneDrive and databases containing personal data.

  • Recommendations

    Condensed insights per source for IT management, data protection and internal audit.

Working together with the other modules

Data Discovery is where the cycle begins. What it finds is used further by the other modules.

Getting started

Fixed-price assessment

See within six weeks where your personal data is stored and where action is needed – with a focus on Copilot and AI if you wish. With a report and recommendations.

Go to the assessment

Frequently asked questions about Data Discovery

Does my data go to third parties?

No. Data Discovery runs in your environment and reads the sources there. It stores the location and masked matches in your database, not the content of the sources.

What permissions does Data Discovery need?

Only read access to the sources. For Microsoft 365, your administrators set up an app registration with read permissions.

Does Data Discovery recognise Swiss identifiers?

Yes, for example the AHV number (Swiss social security number). In addition, it recognises social security and tax numbers from Germany, Austria, France, Italy, Spain, the Netherlands, Belgium and Poland, as well as IBANs, credit card, ID document and insurance numbers.

How does Espresso handle false positives?

False positives can be permanently suppressed; subsequent scans take this into account. Known false positives can be excluded from the outset.

Is our Microsoft 365 ready for Copilot?

Data Discovery shows where in SharePoint, OneDrive and mailboxes there is personal data that Copilot would find. The fastest way to get there is the assessment with a focus on Copilot and AI.

How do we get started?

With a 30-minute demo or a fixed-price assessment.

See Espresso in 30 minutes

We will show you the cockpit with sample data – and discuss where you should start.

Request a demo

or write directly to info@espressodataprivacy.com