Find My Data finds enterprise data that may belong to a business domain, asks the people who understand it to confirm or correct it, connects those decisions to related assets and risk, and enables governed action — with evidence behind every step.
Customer-hosted in your own Azure environment. Your content never leaves your boundary to license or support the product.
A closed loop that puts the people who understand the data — not only security engineers — at the center.
Incremental, resumable scans over SharePoint and OneDrive combine policy-grounded AI, detectors, metadata, permissions, and exact/near-duplicate fingerprints to surface candidate matches.
Data-domain owners answer “Is this yours?” with the evidence in front of them. AI proposes; authorized humans decide. Every decision is recorded and propagates to related content.
Confirmed data links to duplicates, exposure, sensitivity labels, owners, and risk through a typed relationship graph — with the reason for every connection.
Propose a Purview label or remediation, approve it in a separate capability context, execute idempotently, verify against the source, and keep a tamper-evident audit trail.
Your workspace: My Data, My Domains, Matches, Connections, Findings, and Actions — evidence-first, keyboard-fast.
Governance that stays evidence-backed and human-authorized end to end.
Find My Data installs inside your Azure environment. The vendor plane handles licensing and coarse fleet health only.
Files, excerpts, paths, fingerprints, embeddings, identities, permissions, findings, and Analyst conversations never leave your environment to license or support the product.
Every classification, relationship, finding, and AI answer exposes its evidence, confidence, provenance, and version. Nothing is a black box.
AI proposes; authorized people confirm ownership, material classifications, regulatory mappings, model releases, and remediation.
Microsoft Entra sign-in, deny-by-default capabilities scoped to business domains, separate read vs. remediation app identities, and a per-tenant hash-chained audit trail.
Only bounded excerpts and derived features are retained, purpose-checked on read. Detected identifiers are redacted from stored previews.
Provider-neutral gateway with a deterministic default, versioned templates, untrusted-content delimiting, and no autonomous mutation.
SharePoint and OneDrive today, with Teams and Exchange connectors and near-real-time change reconciliation. Read the docs for exact capability states — nothing here claims to be live until it is.
SharePoint & OneDrive scanning with permission and sensitivity-label observation; Teams & Exchange connectors; Purview label read/write behind approval.
Detectors, keyphrases, exact/near-duplicate fingerprints, semantic similarity, and a calibrated ensemble — every score comes with its evidence.
Durable work queue, distributed scanner fleet, staged caching that avoids needless refetches, and re-scoring without touching the source.
Single-tenant, customer-hosted, with managed identity and Key Vault. A vendor control plane handles licensing and allowlisted fleet health only.
Create a verified business account, receive a signed evaluation entitlement, and install Find My Data in your own environment.
The demonstration environment uses fictional synthetic data (“Meridian Grove Holdings”) and is clearly identified as a demo — it is never a customer’s installed environment and holds no real data.