Know exactly what sensitive data you hold, who can reach it, and what it's costing you.
Data Risk maps sensitive data across SharePoint, Teams, OneDrive, Exchange and Windows file servers, separates real risk from noise, and shows where Microsoft Purview classification and retention labels don't match what's actually stored — then keeps watching, so a downgrade or access change is flagged in real time instead of discovered months later. It also cuts storage cost by removing redundant, obsolete and trivial data.
- Read-only
- One admin consent, plus a light collector for file shares
- Fixed fee
- Data Footprint Assessment in 3–4 weeks
- Evidence-backed
- One recommendation per location, with an owner
- Your region
- Data stays where your business is
You can't protect what you don't know you have — and a label nobody's watching isn't governance.
The challenge
How ShadowSight fixes it
Built for SharePoint — and the OneDrive and file share sprawl around it — that nobody's had time to govern.
Typically organisations with roughly 50 to 5,000 staff, running on SharePoint as their main store — usually alongside OneDrive and Windows file shares — where nobody can say with confidence what's stored, who can reach it, or why storage costs keep rising. SharePoint is where the risk concentrates for most organisations, so that's where the platform focuses first — before extending the same visibility across OneDrive and file shares.
IT & compliance leads
You need an answer, not an enterprise deployment project. No E5 licensing or consultants required.
Banks, insurers & super
CPS 234 expects you to identify and classify your information assets — and prove you keep doing it.
Universities & agencies
Decades of decentralised sprawl and records-act obligations. Scales to petabyte estates.
Most of the estate is understood without opening a file.
Metadata answers most questions before a single file is opened. Validated pattern checks narrow the rest. Only genuinely ambiguous content is ever read in context by an AI model, transiently.
Connect in minutes
One read-only admin consent for Microsoft 365, plus a lightweight collector for file shares.
Estimate in days
Statistical sampling projects the footprint fast, then deep scanning targets the hot zones.
Decide with evidence
Every location gets one recommendation — delete, archive, migrate or fix access — with evidence and an owner.
Stay ahead
Continuous monitoring flags the next label change or access drift the moment it happens.
Start with a Data Footprint Assessment.
A fixed-fee engagement, done in 3–4 weeks with under a day of your team's time — the board-ready answer, generated by the platform, not written by consultants.
Sensitive Data Footprint
What you hold, where it concentrates, and how confident we are — every finding classified, not a raw pattern dump.
Exposure Analysis
Where sensitive content meets excessive access: open shares, org-wide permissions, anonymous links, dead accounts that still hold rights.
ROT & Remediation Plan
Redundant, obsolete and trivial data bucketed into delete/archive/migrate/remediate, with evidence and a suggested owner.
Label Integrity Report
How Purview label coverage compares with reality, and every change since the last review.
Executive Briefing
We walk your leadership through the findings and the recommended 90-day actions, in their language.
Clean Exit, Certified
Access revoked, findings destroyed on your instruction, destruction certificate issued — or keep the platform watching.
A data-risk product that refuses to become one.
Content is never stored
Files are analysed in place and read transiently for classification only. We retain metadata and verdicts — nothing else.
Data stays in your region
Data is stored in the region where your business is located, to maintain data sovereignty — platform, findings and AI analysis included.
Least privilege, always
Read-only Microsoft consent; the file-share collector runs under a low-privilege account you provision.
Every decision is auditable
Recommendations, approvals and dismissals carry who, when and why.
Frequently asked questions
Which systems does Data Risk cover?
SharePoint (including the files behind Microsoft Teams), OneDrive, Exchange email and Windows file servers. SharePoint is where risk concentrates for most organisations, so that is where it focuses first.
Does Data Risk read our files?
Mostly it doesn't need to. Metadata answers most questions before a file is opened, and validated pattern checks narrow the rest. Only genuinely ambiguous files are reviewed by an AI model — Azure OpenAI, in your region — which reads the file's text transiently. We keep the verdict, a one-sentence reason and brief masked extracts as evidence, never a copy of the file.
How does it work with Microsoft Purview labels?
It reads your existing Purview sensitivity and retention labels and shows where they don't match what is actually stored. Retention labels are respected: nothing under retention is recommended for deletion. Access is read-only, so it doesn't change labels itself. Regular re-scans show label and access changes since the last scan.
What is a Data Footprint Assessment?
A fixed-fee engagement, completed in 3–4 weeks with under a day of your team's time. It delivers your sensitive-data footprint, an exposure analysis of where sensitive content meets excessive access, a plan for redundant, obsolete and trivial data, a label-integrity report, and an executive briefing with recommended 90-day actions.
Does it help APRA-regulated organisations with CPS 234?
CPS 234 expects you to identify and classify your information assets and show that you keep doing it. Data Risk does that on a regular schedule across SharePoint, OneDrive and file shares, with every recommendation, approval and dismissal recorded — who, when and why.
Start with a Data Footprint Assessment.
A 30-minute scoping call is all it takes — see your first footprint estimate, including label integrity, inside a fortnight.