Additional Info

CompanySpirion
Websitehttp://www.spirion.com
Company size (employees)100 to 499
Type of solutionSoftware

Overview

There are many hurdles when it comes to classifying personal, sensitive, and regulated data. Data is inextricably linked to other pieces of data (such as a person’s name tied to a purchase order); organizations need to process data for different purposes (such as shipping) in different capacities. They must also follow a consumer’s request to opt-out of certain data processing measures but still retain that same data for legal reasons.

Spirion enables organizations to discover and validate the location of personal information and then classify and control it according to the data protection mandates they are subject to. The platform overcomes today’s classification limitations by making the process reliable, accurate, and continuous (aka, persistent). It can spot personal information by looking for data patterns, such as birth date or social security number.

Spirion breaks down data privacy management into five fundamentals: Discover, Classify, Understand, Control, and Comply. Automated data discovery and classification provide the critical first steps in Spirion’s comprehensive data privacy and security framework. Once you find personal data, you must tag it properly to ensure rightful access and use throughout the organization. Proper tagging and classifying mean being able to find that data when responding to a consumer’s “right to know,” or “right to be forgotten.”

Spirion streamlines data protection, automatically analyzing and categorizing data based on pre-determined parameters continually and in real-time. It also reclassifies data as needed, such as changes within the business or changes in compliance regulations. With Spirion, automated, persistent data classification ensures that no matter how many times data gets moved, copied, or shared; it is categorized and tagged automatically based on sensitivity and existing security policies. This prevents data loss and enables organizations to achieve their risk reduction goals and regulatory compliance, while safeguarding their reputation.

How we are different

1. Along with traditional data classification approaches, Spirion offers a new schema for today’s new privacy rules. This new methodology adds a layer to data classification that accounts for three critical variables: data processing, purpose, and privacy:
-Data Processing (aka, consent) — New and evolving data privacy regulations require an individual’s consent for how organizations use their private data, particularly GDPR and CCPA.
-Purpose (aka, access) — GDPR requires organizations that process European Union citizens’ personal data to clarify the purposes for collecting data. As a result, companies now have to manage their data according to its purpose or purposes within their organizations.
-Privacy (aka, compliance) — Both GDPR and CCPA are laser-focused on data privacy. Complying with these stricter regulations requires more advanced data classification schemas.


2. Spirion is focused on the root cause of data risk, bringing unrivaled depth, breadth, and accuracy to bear. In fact, we build and deliver the most accurate data discovery and classification solutions on the market. Independent, third-party test labs and customers have benchmarked Spirion’s ability to detect personal data with 98% accuracy and the lowest false-positive rates in the industry. Fewer false-positives reduces the footprint of personal data and makes combing through the data exponentially more productive, allowing customers to focus on the real problems.
3. Data discovery and classification are an ongoing challenge because data is dynamic (increasing exponentially every day). Spirion’s proprietary algorithms, content awareness, and contextual analysis capabilities discover, classify, and operationalize enterprise data. Rules-based automation automatically and accurately examines, identifies, and tags data sensitivity – including redundant, obsolete, and trivial data and performs remediation actions to prevent compromise and misuse. As a result, organizations gain greater visibility into their personal data footprint, reduce risk exposure, and facilitate compliance with data protection laws and regulations.