# FOCTTA Discovery - DSPM for personal data across your estate > Find and classify personal data across databases, cloud accounts, file shares and laptops, with posture, risk and lineage mapped to the DPDP Act. Web page: https://foctta.com/discovery This Markdown copy has the same content as the web page. Built 2026-10-14. --- FOCTTA Discovery (DSPM) Find personal data # Your register says what you hold. Discovery shows what is really there. FOCTTA Discovery finds personal data across your databases, clouds, SaaS, file servers and laptops, and shows how exposed it is and where it goes. (DSPM \- data security posture management) Sold on its own, with or without FOCTTA Consent. [Book a demo](https://foctta.com/company) See how Discovery finds data Aadhaar outside a vault · shared drive PAN in a KYC PDF · file server Children's dates of birth · CRM How it works 1. Connect databases, clouds, files and laptops 2. Find and classify the personal data 3. See the exposure, then fix each finding ## Find personal data, rate the risk, see where it flows, then fix it or flag it. Hover or tap a card for detail. **India-grade classification**: Finds Aadhaar, PAN, UPI and other Indian IDs. Indian identifiers are validated with their checksums and context, not just pattern-matched. - Aadhaar, PAN, GSTIN, UPI, ABHA and more - Inside PDFs, Word and Excel files - Turn detectors on or off per organisation **Exposure and risk**: Risky copies and coverage gaps, ranked. Toxic combinations, shadow copies, orphan data and coverage gaps, ranked across the estate. - Public exposure and cross-border findings - Board summary - Posture on any past date **Where data flows**: Who can reach each field, and where it goes. Where each sensitive column is used, who can reach it, and which data leaves the estate, by country. - Views, procedures and jobs that use a column - Data leaving the estate, by country - Cross-border register **Findings you can act on**: One row per file, with an owner and a fix. One row per file, not one per match, with an owner, a status and a fix. - A "what we did not read" report - Malware and attacker tools flagged in files - Owner, status and remediation per finding **Find one person's data**: Give one ID, see every store that holds them. Give one identifier and find every store that holds that person, following foreign keys. - Signed, metadata-only DSAR export - Erasure run inside your network - Checks the old value is really gone **Children's data DPDP S.9**: Where minors' data sits, and guardian consents. A children's data report by system and business unit, and a guardian-consent register. - Minor dates of birth detected - PDF export - Hard block with FOCTTA Detection (DDR) Where it looks Most sources in pilot **Only masked metadata leaves your network.** File servers proven at a customer site. Others: lab and demo data. **Databases** Databases · 9 PostgreSQL, MySQL, SQL Server, Oracle, Cloud SQL, Azure SQL, MongoDB, Elasticsearch, Redis **Warehouses and streams** Warehouses and streams · 4 Snowflake, BigQuery, Databricks, Kafka **Cloud storage** Cloud storage · 3 Amazon S3, Azure Blob, Google Cloud Storage **SaaS and drives** SaaS and drives · 5 SharePoint, OneDrive, Google Drive, Salesforce, Workday **Servers and mainframes** Servers and mainframes · 4 File servers, IBM i, Mainframe extracts, Unix over SSH **Laptops** Laptops · 1 Windows and Linux laptops Laptops, at fleet scale Pilot **Files are classified on the laptop. Only findings leave.** How it rolls outA silent installer for Intune or SCCM, rolled out in waves and paused with one action, with a local log of what was read for the employee's comfort. Finding data you did not know you had ## Eight ways to build the inventory, most automated first. From your cloud accounts and IT asset register to a plain CSV file. **Schema upload: no database passwords shared** For banks that will not share database passwords, upload the schema instead: FOCTTA classifies from structure and never receives credentials. Credentials stay on your host Read-only scanners L1 Cloud accounts Data stores in your AWS account: RDS, Redshift and S3. L2 IT asset register Databases and servers IT registered. ServiceNow CMDB L3 Endpoint security tool Computers and servers it tracks. EDR L4 Staff sign-in directory Unapproved cloud apps staff can reach. SSO / SCIM L5 HR system People and teams, to name owners. L6 Network exports Every host seen on your network. L7 Active scanning Everything FOCTTA's scanners read. L8 CSV import A plain list, when nothing is automated. Works on its own. Works better together. ## Pair it with FOCTTA Consent, Activity (DAM) or Detection (DDR) when you are ready. **With FOCTTA Consent Consent linked to the data Per customer**: Flags data used beyond what people agreed to. Consents with no data found, and data used beyond its purpose, flagged. **With FOCTTA Consent Breach: locate and report back Pilot**: Locates breached data from hashed IDs. A breach asks Discovery where the breached data sits, using hashed identifiers only. **With FOCTTA Consent Findings become risks**: Serious findings raise and close register risks. Serious findings raise and close risks in the risk register. **With FOCTTA Activity (DAM) Behaviour on the data you found**: Activity (DAM) watches the stores marked sensitive. Activity (DAM) watches the stores Discovery classified as sensitive. **With FOCTTA Detection (DDR) Your identifiers, not defaults**: Detection (DDR) learns which columns hold IDs. The gateway learns which columns hold person identifiers from Discovery. **With FOCTTA Detection (DDR) Children's data blocked Pilot**: No guardian consent, no minors' data. Queries on minors' data blocked without the Section 9 role and guardian consent. **Signed evidence packs** Pilot **India's DPDP Act** A ZIP with a signed manifest for the Act. **SEBI CSCRF** Disaster-recovery and continuity test log. **EU privacy law GDPR** For people in the EU. **California privacy law CCPA** For California consumers. ## Discovery (DSPM) finds the data. Activity (DAM) shows who reads it. Detection (DDR) decides who may. [See how Activity watches data](https://foctta.com/activity) [See how Detection blocks a query](https://foctta.com/detection) [Book a demo](https://foctta.com/company)