Spirion, a pioneer in sensitive data discovery, classification, and remediation, and the leading encryption software company Thales Group today announced their alliance to deliver an integrated solution for discovering, classifying, and protecting sensitive data with file-level encryption and rights management.
To meet the challenges of modern perimeter-less, data-driven enterprises, network security alone isn’t sufficient. Security must be embedded with the data wherever it travels. Encryption achieves this goal by making the data readable only to those individuals who are authorized to view it. But only a fraction of enterprise data is sensitive, and encrypting data comes with its own challenges, including blocking legitimate access and reducing productivity.
“While it’s an overreach for organizations to encrypt all their data, many security teams are doing just that. They’re forced to encrypt everything because they lack confidence that they know exactly where all their sensitive data is being stored and used,” said Darin Pendergraft, Spirion’s Chief Marketing Officer. “With Spirion sensitive data discovery and classification, organizations can prioritize data protection on the sensitive data that needs to be protected. Personal information like customer credit card numbers or internal confidential documents can be tightly secured, while the vast majority of enterprise data that is public can continue to flow freely.”
“We’re delighted to partner with Spirion to deliver best-in-class sensitive data discovery and classification to optimize the Thales CipherTrust Transparent Encryption platform,” said Gaurav Chander, Sr. Product Manager. “Our data-at-rest encryption with centralized key management, privileged user access control, and detailed data access audit logging protects data wherever it resides.”
Here’s how it works:
Spirion is Step One for Sensitive Data Discovery and Classification
The most accurate data identification delivers the most accurate protection. Data can’t be properly protected if its sensitivity isn’t completely understood. Spirion data protection solutions help discover, classify, and remediate sensitive data wherever it lives. Spirion is the leader in sensitive data discovery and classification. Our sophisticated data science algorithms that locate sensitive data have been battle-tested for over 15 years in leading Fortune 500 companies and educational institutions. Spirion’s Privacy-Grade technology identifies both structured and unstructured personal data throughout an organization—in share files, emails, websites, databases, cloud storage, SaaS applications and more — on-prem, in the cloud, and even on endpoints like employee laptops.
Spirion achieves industry-leading, proven 98.5% accuracy via Branching Validation Algorithms, rather than manually or with a single verification – i.e., RegEx. These algorithms are comprised of dozens of predefined and linear classifiers, procedural validators (when searching data this means search results can be precisely validated using tree traversal, so that the results of early validations can determine whether any additional validations are executed), checksums, Boolean logic formulas, decision trees, exact data matches, dictionaries, and an optional user-defined rule builder. In doing so, Spirion avoids the high false-positive rate (and associated frustration) commonly experienced with traditional discovery tools.
Spirion then automatically classifies documents for sensitivity, applicable regulations, and other context, based upon organizational policies. These classifications are then shared with the Thales CipherTrust Transparent Encryption platform to encrypt data based on its sensitivity and policies.
Transparent Data Protection
Thales CipherTrust Transparent Encryption provides continuous file-level encryption that protects against unauthorized access by users and processes in physical, virtual, and cloud environments. Because the encryption is applied at a file-level and based on the data discovery and remediation applied by Spirion, implementation can be done without disrupting ongoing business and operational processes even during deployment and rollout.
Thales and Spirion, Better Together
Thales and Spirion are helping organizations stay ahead of shifts in the modern threat landscape by delivering solutions that focus directly on the data without reliance on an increasingly porous perimeter. Thales CipherTrust Transparent Encryption allows IT organizations to easily control access to sensitive or restricted documents, enabling intelligent encryption that is surgically focused on the data itself, not just where it happens to be stored.
Spirion has relentlessly solved real data protection problems since 2006 with accurate, contextual discovery of structured and unstructured data; purposeful classification; automated real-time risk remediation; and powerful analytics and dashboards to give organizations greater visibility into their most at-risk data and assets. Spirion’s Privacy-Grade data protection software enables organizations to reduce risk exposure, gain visibility into their data footprint, and improve business efficiencies and decision-making while facilitating compliance with data protection laws and regulations.
Thales (Euronext Paris: HO) is a global leader in advanced technologies, investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum computing – to build a confident future crucial for the development of our societies. The Group provides its customers – businesses, organizations and governments – in the defense, aeronautics, space, transport, and digital identity and security domains with solutions, services and products that help them fulfil their critical role, consideration for the individual being the driving force behind all decisions.
Contact us to learn more about how Spirion’s accurate data identification and classification combined with file-level encryption and rights management from Thales CipherTrust Transparent Encryption can help your organization keep sensitive data secure and compliant.