Find Hidden Sensitive Data with DRA

Picture of Kapish

Kapish

Your organisation holds more personal information than it thinks. Customer details in a shared drive. Bank details attached to an old email. Scanned forms in a folder nobody has opened in years.

None of it was put there to cause harm. It built up one file at a time, across file shares, inboxes and records systems that were never designed to tell you what they contain.

The risk isn’t the data you manage. It’s the data you don’t know you have.

Document Repository Analyser (DRA), powered by EzeScan, closes that gap. It scans your network file shares, email servers and supported EDRMS platforms, then discovers, classifies and remediates sensitive information automatically.

No manual searching. No blind spots.

DRA builds a complete inventory of the documents across your repositories: where each one lives, what it contains and how it should be managed. It forms part of the Data Discovery & Capture capability of the Kapish Information Intelligence Platform, bringing previously unmanaged repositories into intelligent document processing and records management workflows.

  • Discover. Crawl network file shares, email servers and supported EDRMS platforms to locate and catalogue documents, capturing repository, file name, location, creation date and status. 
  • Detect. Identify personal information (PII) and payment card data (PCI) using text analysis, language models and card pattern recognition, then apply metadata tags automatically. 
  • Redact. Review flagged content in EzeScan’s web application and apply automatic or manual redaction, zone based or full page, with predefined or custom reason codes. 
  • Monitor. Scheduled scans pick up new and changed documents, so nothing slips through between runs. 

Discovered documents can also move straight into processing workflows for OCR, duplicate checking, file conversion and EDRMS registration, with stubs or links left behind when records are relocated. 

Every action is tagged and tracked, so your audit trail stays intact. A monitoring dashboard shows document counts across every repository, progress through each workflow and where the bottlenecks sit. 

The Office of the Australian Information Commissioner (OAIC) received 1,205 data breach notifications in 2025, the highest number since the Notifiable Data Breaches scheme began in 2018 and an 8% rise on 2024. Health service providers notified the most breaches (225), followed by finance (157) and the Australian Government (118). 

Most of those notifications (716) came from malicious or criminal attacks. An attacker can only take what you hold, so every forgotten file of personal information widens what a single breach exposes. 

The rules are tightening too. The Government’s exposure draft of the Privacy Amendment (Personal Data Protection) Bill 2026 proposes that organisations identify the personal information they hold, consider destroying what they no longer need, and notify the OAIC of eligible breaches within 72 hours. 

You can’t secure, minimise or report on information you haven’t found. 

Kapish helps organisations better understand, manage and protect their information, combining information management expertise with platforms like OpenText Content Manager and Microsoft 365. Through our partnership with EzeScan, DRA joins that same governance picture: find the sensitive information, classify it, and move it into the records and processing workflows you already trust. 

The value is not simply finding risky files. It is knowing what you hold and where, with the evidence to show it, so your privacy, records and security teams can act, and keep acting as new documents arrive. 

See DRA live at the Information Management User Group Melbourne on Wednesday 18 November, 2:00pm to 5:30pm, at 7 Spencer Street, Melbourne.  

Register here: 

Want to know what’s hiding in your repositories? Get in touch for a demo of Document Repository Analyser. 

Get in touch with Kapish!

Latest News