Four labels. Everyone understands them.
Applied automatically where patterns are clear, like tax file numbers. Staff can raise a label freely, and lower one with a reason.
Anyone can see it. Brochures, published reports.
Staff only. Most everyday work.
No outside sharing without a reason that's logged.
Encrypted, matter team only. No USB, no unapproved AI.
Nothing is blocked until we know what normal looks like.
Four weeks of watching shows which rules would break real work. Then staff see a tip and can override with a reason. Only the riskiest actions are ever blocked.
Risky sharing fell from 310 a week while watching to 28 a week once blocking started.
The data that costs you when it leaks.
Patterns for common identifiers are built in. Your own come from Groundwork.
Government identifiers
Tax numbers, national ID numbers, health card numbers and driver licence numbers, for the countries you work in.
Financial details
Bank account numbers, card numbers and payment details.
Your own
Client file labels, matter numbers, and anything Groundwork marked as a crown jewel.
Bulk downloads
Hundreds of files pulled in minutes, often the week before someone resigns.
Risky sharing
Confidential files sent to personal email or shared with "anyone with the link".
Into AI tools
Sensitive data pasted into AI tools that aren't approved. Guardrails goes further.
$3 per user a month.
In this example, Northbank's 40 people come to $120 a month. Email and files are covered on Microsoft 365 Business Premium and E3. Blocking on devices, like copying to USB, needs E5. On Google Workspace it depends on your edition.
Most businesses guess where client data lives. Find out instead.
Groundwork maps your crown jewels. Data Fence finds every copy of them.