Sensitive Data Discovery Feeds Straight Into Records Systems

Australian organisations searching old file shares and inboxes for personal and payment card data have a new option from Kapish. Its Document Repository Analyser (DRA), built on EzeScan technology, finds that data, classifies it and routes it for redaction.

DRA is aimed at a problem many organisations cannot see: sensitive information that has built up in unmanaged repositories over many years. It covers network file shares, email servers and supported EDRMS platforms.

The tool crawls and catalogues documents automatically. It detects sensitive content using text analysis, language models and card pattern recognition, then applies metadata tags based on what it finds.

Flagged documents can be reviewed and redacted through EzeScan's web application. Predefined or custom reason codes maintain a full audit trail of each redaction.

Scheduled scans then monitor repositories for new and changed documents. Kapish says this makes visibility ongoing rather than a one-off clean-up exercise.

DRA forms part of the Data Discovery and Capture capability of the Kapish Information Intelligence Platform.

The launch comes as breach notifications reach record levels. The Office of the Australian Information Commissioner received 1,205 notifications in 2025, an 8 per cent increase on 2024. That was the highest annual total since the Notifiable Data Breaches scheme began in 2018. Malicious or criminal attacks accounted for 716 of them.

Obligations may also tighten. The Government's exposure draft of the Privacy Amendment (Personal Data Protection) Bill 2026 proposes that organisations identify the personal information they hold. It would also require eligible data breaches to be notified to the OAIC within 72 hours.

"Most organisations don't have a sensitive data problem they can see. They have one they can't," said Nicholas Fripp, Head of IMG Alliances at Kapish.

"Personal and payment information ends up in shared drives, inboxes and legacy systems over many years, and nobody has a complete picture of what's there," Fripp said. "DRA gives our customers that picture, and the tools to act on it, without asking their teams to trawl through thousands of files by hand."

Fripp said the EzeScan partnership means customers can move what DRA finds straight into the records management and governance systems they already use.

DRA will be demonstrated at the Information Management User Group Melbourne, hosted by Kapish on Wednesday 18 November at 7 Spencer Street. Presentations will come from Goulburn Valley Water, OpenText, EzeScan and Kapish.

kapish.com.au

 

Australian organisations searching old file shares and inboxes for personal and payment card data have a new option from Kapish. Its Document Repository Analyser (DRA), built on EzeScan technology, finds that data, classifies it and routes it for redaction.

DRA is aimed at a problem many organisations cannot see: sensitive information that has built up in unmanaged repositories over many years. It covers network file shares, email servers and supported EDRMS platforms.

The tool crawls and catalogues documents automatically. It detects sensitive content using text analysis, language models and card pattern recognition, then applies metadata tags based on what it finds.

Flagged documents can be reviewed and redacted through EzeScan's web application. Predefined or custom reason codes maintain a full audit trail of each redaction.

Scheduled scans then monitor repositories for new and changed documents. Kapish says this makes visibility ongoing rather than a one-off clean-up exercise.

DRA forms part of the Data Discovery and Capture capability of the Kapish Information Intelligence Platform.

The launch comes as breach notifications reach record levels. The Office of the Australian Information Commissioner received 1,205 notifications in 2025, an 8 per cent increase on 2024. That was the highest annual total since the Notifiable Data Breaches scheme began in 2018. Malicious or criminal attacks accounted for 716 of them.

Obligations may also tighten. The Government's exposure draft of the Privacy Amendment (Personal Data Protection) Bill 2026 proposes that organisations identify the personal information they hold. It would also require eligible data breaches to be notified to the OAIC within 72 hours.

"Most organisations don't have a sensitive data problem they can see. They have one they can't," said Nicholas Fripp, Head of IMG Alliances at Kapish.

"Personal and payment information ends up in shared drives, inboxes and legacy systems over many years, and nobody has a complete picture of what's there," Fripp said. "DRA gives our customers that picture, and the tools to act on it, without asking their teams to trawl through thousands of files by hand."

Fripp said the EzeScan partnership means customers can move what DRA finds straight into the records management and governance systems they already use.

DRA will be demonstrated at the Information Management User Group Melbourne, hosted by Kapish on Wednesday 18 November at 7 Spencer Street. Presentations will come from Goulburn Valley Water, OpenText, EzeScan and Kapish.

kapish.com.au