FOCTTA, Orchestrating Privacy, Trust and Compliance
Readiness check Book a demo
FOCTTA DiscoveryFind personal data

Your register says what you hold. Discovery shows what is really there.

FOCTTA Discovery finds personal data across your databases, clouds, SaaS, file servers and laptops, and shows how exposed it is and where it goes. (DSPMDSPM (Data Security Posture Management): Software that finds where personal and sensitive data lives, and shows who can reach it and how exposed it is. - data security posture management) Sold on its own, with or without FOCTTA Consent.

Aadhaar outside a vault · shared drive
PAN in a KYC PDF · file server
Children's dates of birth · CRM
How it works
  1. Connect databases, clouds, files and laptops
  2. Find and classify the personal data
  3. See the exposure, then fix each finding

Find it, judge it, trace it, act on it.

Hover or tap a card for detail.

Where it looksMost sources in pilot
Only masked metadata leaves your network. File servers proven at a customer site. Others: lab and demo data.
Laptops, at fleet scalePilot
Files are classified on the laptop. Only findings leave.
How it rolls outA silent installer for Intune or SCCM, rolled out in waves and paused with one action, with a local log of what was read for the employee's comfort.
Finding data you did not know you had

Eight ways to build the inventory, most automated first.

From your cloud accounts and IT asset register to a plain CSV file.

Credentials stay on your hostRead-only scanners
L1Cloud accountsEvery data store in AWS, Azure or GCP.
L2IT asset registerDatabases and servers IT registered.ServiceNow CMDB
L3Endpoint security toolComputers and servers it tracks.EDR
L4Staff sign-in directoryUnapproved cloud apps staff can reach.SSO / SCIM
L5HR systemPeople and teams, to name owners.
L6Network exportsEvery host seen on your network.
L7Active scanningEverything FOCTTA's scanners read.
L8CSV importA plain list, when nothing is automated.
Works on its own. Works better together.

Pair it with FOCTTA Consent, Activity or Detection when you are ready.

Signed evidence packsPilot
India's DPDP ActDPDP Act (Digital Personal Data Protection Act, 2023): India's law on how organisations collect and use personal data, and the rights people have over it.A ZIP with a signed manifest for the Act.
SEBI CSCRFSEBI CSCRF (SEBI Cybersecurity and Cyber Resilience Framework): SEBI's cyber rules for market entities: a 6-hour incident notice and a portal report within 24 hours.Disaster-recovery and continuity test log.
EU privacy law GDPRFor people in the EU.
California privacy law CCPAFor California consumers.

Know where the data is. Then watch it, and guard it.