See the whole journey of a single file.
Where did data come from, who received it and which copies remain? Explore classification, DLP, retention and disposal decisions through the Harbor Data dossier.
Open the data dossierEvery stop raises a different question.
An encrypted contract will be shared with a partner.
- Review question
- Is there evidence for purpose, correct recipient and destination approval?
- Evidence to request
- Class, recipient, scope and review reference.
Choices stay on this page; no real sharing, deletion, account progress, points or certificate is created.
Study sequence for your role
- 1Data classification, ownership and lineage
- 2Sensitive-data discovery and finding validation
- 3Secure sharing, SaaS and third-party data flows
- 4Retention schedules, legal holds and backups
- 5Encryption, masking and safe test data
- 6DLP policy design and exception management
- 7Secure deletion, media sanitization and disposal evidence
- 8Data-loss investigation and control improvement
8 topics, 24 explained scenarios
8 modules
Data classification, ownership and lineage
Move from a file label to a data passport with business purpose, ownership, copies and handling conditions.
Beginner → intermediate → advancedSensitive-data discovery and finding validation
Separate a scan match from a validated finding. Plan coverage, blind spots, false positives and minimal sampling.
Beginner → intermediate → advancedDLP policy design and exception management
Move beyond a DLP-enabled indicator to channels, business rules and validated outcomes. Review false blocking and missed coverage separately.
Beginner → intermediate → advancedSecure sharing, SaaS and third-party data flows
Do not confuse an encrypted connection with permission to share. Review class, purpose, recipients and external-copy accountability in the local data passport.
Beginner → intermediate → advancedEncryption, masking and safe test data
Explain the difference between encrypted, masked and anonymous data. Govern keys, re-identification risk and test copies together.
Beginner → intermediate → advancedRetention schedules, legal holds and backups
Separate retention time from deletion authority. Review trigger events, copies and holds using fixed-time synthetic records.
Beginner → intermediate → advancedSecure deletion, media sanitization and disposal evidence
Separate a delete command from verified sanitization. Review media, method, custody and the scope of disposal certificates.
Beginner → intermediate → advancedData-loss investigation and control improvement
Move from a DLP alert to data, recipients, copies and verified outcomes. Connect incident closure to cause and regression evidence.
Beginner → intermediate → advancedShareable. But should it be retained?
Compute sharing blocks and retention reviews separately in two synthetic dossiers. Encryption cannot authorize a wrong destination, and a passed date cannot grant deletion authority. The Node.js kit needs no network or package installation.
Open the browser data deskDownload the Harbor Data kit