Data posture
Find and classify personal data at rest on every laptop, and trace each copy back to where it came from.
DPDP Rules enforceable 13 May 2027
Customer data lives on your team’s laptops. So do their AI tools.
Find personal data on every laptop, stop it leaking, and keep AI tools in check, with the evidence the DPDP Act asks for.
Free for up to 5 laptops About 2 minutes to install Files never leave the laptop
72 hoursto file a detailed breach report with the Board
₹250 croremaximum penalty for weak security safeguards
3 modulesPosture, DLP and AI governance on one agent
0 filesuploaded to Scanyx; only masked findings
The platform
One agent on every laptop. Three ways it protects you.
Know where personal data sits, control how it leaves, and govern the AI that reads it. Each module works on its own and shares one incident view.
Endpoint DLP
Stop personal data leaving through USB, AirDrop, personal cloud, web uploads and AI chats, per team and data type.
AI Guardian
Govern the AI tools and agents your teams use: what they are, what data they touch, and which actions need a human.
The blind spot
Your databases are locked down. The files in Downloads are not.
USB and AirDrop
A KYC export copied to a pen drive or a personal laptop.
Personal cloud
Sync folders, WeTransfer and web uploads to personal accounts.
Pastes into AI chats
Customer records pasted into chatbots to “summarise this”.
Autonomous agents
Coding agents that read secrets, run commands and edit files.
What we detect
AadhaarPANBank a/c & IFSCUPI IDsCard numbersPayrollPhone, email, addressIP & device IDsAPI keys & secretsLogs & exportsBiometrics
How it works
Four steps, from install to a DPDP-ready incident report.
- 01 · Install
Live in 2 minutes per laptop
Run the installer, or push it to every laptop through your MDM.
- 02 · Find
See where personal data sits
e.g. a KYC export with Aadhaar numbers left in Downloads, plus disk-encryption and firewall checks.
- 03 · Stop
Block, encrypt, warn or allow
Per team and data type. e.g. block payroll to USB; warn before pasting PAN into an AI chat.
- 04 · Report
One incident, not 100 alerts
Timeline and record counts ready for the 72-hour breach report. Send to Jira in one click.
Every incident explains itself.
Which file, what data, how many records, and exactly which rule fired and why. A masked preview confirms the match without exposing it.
AI governance
Say yes to AI. Keep the KYC data out of it.
Your teams already use chatbots, copilots and coding agents. AI Guardian shows you which ones, what they touch, and puts a human in front of the actions that matter, so regulated teams can adopt AI without guessing.
Shadow AI inventory
Prompt and upload protection
Agent session visibility
Human approval for risky actions
Policies over AI operations
Evidence for your AI policy
Illustrative session. Approvals assigned to an admin open a ticket automatically.
Maps to
DPDP Act 2023 & Rules 2025RBI FREE-AI frameworkMeitY AI Governance GuidelinesISO/IEC 42001 controls
Built for
Teams that handle Indian customers’ personal data every day.
Adopt AI without leaking customer data
Every team touches data the DPDP Act protects, and now so do their copilots and agents.
Answer the security questionnaire
Enterprise buyers want proof that their customers’ personal data is safe on your laptops. Show them.
Protect data in high-volume teams
Large teams handle personal data all day, often from home or shared machines.
Privacy by design
Admins see findings, never the files.
sent
Data type, record count, file hash, masked preview, rule applied.
never
The files, or the personal data inside them.
shared
CSV and Jira carry the summary only, safe as evidence.
DPDP readiness
What the law asks, and how Scanyx helps.
- Reasonable security safeguardsSection 8(5) · Rule 6
- Masking, access control and monitoring on every laptop: rules that block, encrypt or warn.
- Detect and log unauthorised accessRule 6
- Continuous laptop audit and AI agent activity, retained as evidence.
- Breach report within 72 hoursSection 8(6) · Rule 7
- Ready timeline: what data, how many records, where it went.
- Erase data when purpose endsSection 8(7) · Rule 8
- Find stale exports and copies on laptops so they can be deleted.
Scanyx supports compliance work; it does not replace legal advice. Read the DPDP guide →
From the blog
Guides for DPDP, AI governance and DLP.
DPDP Act and Rules 2025: a practical compliance guide for security and IT teams
What India’s DPDP Act and Rules require from security and IT teams: the May 2027 deadline, Rule 6 safeguards, 72-hour breach reporting, penalties up to ₹250 crore, and a six-month plan.
Read the guide →AI governance for Indian financial services: a playbook for chatbots, copilots and agents
How banks, NBFCs and fintechs can adopt AI safely: what RBI’s FREE-AI framework, MeitY’s guidelines and the DPDP Act expect, the five risks to govern, and a seven-step playbook.
Read the guide →Data loss prevention for employee laptops: a guide for Indian teams
How endpoint DLP stops personal data leaking from laptops through USB, cloud, uploads and AI tools: channels to cover, detecting Aadhaar and PAN accurately, response actions, and a rollout plan.
Read the guide →Common questions
What does it cost?
Free for up to 5 laptops. For larger teams, we’ll go through pricing on the demo.
Can anyone see our customer data?
No. Files are checked on the laptop. Only a summary — data type, record count, file hash and a masked preview — leaves it.
Do we have to block ChatGPT and other AI tools?
No. Most teams approve the tools they trust and set rules on the data. Scanyx can warn, redact or block when personal data is about to be pasted or uploaded, and allows everything else.
Which AI agents can Scanyx see?
AI tools and agents running on or used from employee laptops, including coding agents and assistants. Scanyx records sessions and tool calls, and can hold risky actions for approval.
Will it slow employees down?
It doesn’t have to. Warn or encrypt instead of blocking, and allow exceptions with a written reason.
Which devices does it cover?
Work laptops and desktops, office or remote. The same rules apply everywhere.
Does it work with our ticketing?
Yes. Create a Jira issue from any incident, or export CSV. Never raw data.
How long does setup take?
About 2 minutes per laptop, or push to every laptop at once through your MDM.
Fix the blind spots before May 2027.
See Scanyx on your own laptops in 20 minutes: data posture, DLP and AI Guardian. Free for up to 5 laptops.