Data Rakshaq by CERF
PlatformData Discovery & Classification
Module 2 of 12 · DPDP § 8 & 9

AI-driven discovery engine.

Automatically scans, detects and maps personal data across your entire enterprise — structured and unstructured, on-premises and cloud.

The Data Discovery Engine and Classification layer provide end-to-end visibility into where personal data resides, who owns it, and how it should be handled based on DPDP Act classifications. No more guessing what you hold or where — every dataset is fingerprinted, classified, and tied to its compliance obligations.

500+ connectorsAI classificationVisual data mapsDPDP Act Schedule categories
0+
Data Source Types
0%
Classification Accuracy
0 hrs
First Data Map
Faster Than Manual
Core Capabilities

What's inside Data Discovery & Classification

Data Discovery Engine

Automated enterprise-wide scanning, shadow-data detection, Indian data identifier library (Aadhaar, PAN, etc.), PI/SPI identification, data flow mapping, and a live asset inventory.

Data Classification

PD vs SPD auto-classification, children's data flagging, ML-based continuous learning, risk-based labels and retention tags, plus custom classification rules.

Key Features

Why teams pick Data Discovery & Classification

Unified scan sweep across databases, file servers, email, SharePoint, S3, Azure Blob, GCP and SaaS

Agent-based and agentless support

Visual data-flow diagrams

Compliance-ready retention tags

How It Works

From setup to compliance — step by step.

01

Connect

Plug into cloud and on-prem sources via pre-built connectors.

02

Scan & discover

Crawl every source; fingerprint personal data with high-confidence detectors.

03

Classify

Auto-label PD, SPD and children's data using ML models tuned for Indian context.

04

Map data flows

Render a live visual map of how data moves between systems and teams.

05

Tag for retention

Apply retention rules and watch them propagate downstream automatically.

Use Cases

Where it shows up.

BFSI credit data
Healthcare diagnostics records
HR compensation data
FAQs

Answers about Data Discovery & Classification

The questions buyers, DPOs and engineering teams ask us most.

Relational databases, NoSQL, data warehouses (Snowflake, BigQuery, Redshift), object storage (S3, GCS, Azure Blob), file shares, email systems, SharePoint and major SaaS apps. We add new connectors monthly.
Both. Cloud sources use agentless OAuth/IAM connectors. On-prem or air-gapped sources use a lightweight, signed agent that streams metadata only — raw data never leaves your environment.
Yes. Native detectors for Aadhaar, PAN, GSTIN, Voter ID, Driving Licence, bank account formats and IFSC — tuned for Indian conventions including masked formats.
No. Scans are throttled to your configured I/O budget, run on read replicas where available, and can be scheduled to off-peak windows. Most workloads see <2% impact.
Every detection carries a confidence score (0–100). High-confidence detections (>85) are auto-classified. Mid-range items are queued for review. False-positive rate is typically <3% after one tuning cycle.
Yes. Regex, dictionary and ML-based custom rules can be added via the UI or API. Common examples: employee ID formats, internal customer IDs and product-specific identifiers.
Findings flow into the Purpose Registry, RoPA and DSAR engines automatically — so consent, processing records and rights requests all stay in sync with what actually exists.
Yes — PDFs, Word, Excel, scanned images via OCR. Indian regional language detection covers 23 scheduled languages for both content and OCR.
Live data-map: every system shown as a node, every PII type as a coloured connection, every cross-border flow highlighted. You can filter by sensitivity, owner or business unit.
Yes. Every scan, every finding, every classification decision is logged with the model version used and retained for 7 years — sufficient to defend against a DPB inspection.
Ready to deploy Data Discovery & Classification?

See it live in 30 minutes.

See how 500+ Indian enterprises run on DataRakshaQ. Free trial available — no contract required.