Most organisations cannot say what is on their file shares, in their mailboxes or inside their records system, let alone which of it is a card number, a passport scan or a file past its retention date. OpenText Data Security Platform finds it, classifies it and puts the findings in front of the people who can act. WyldLynx has run that discovery for councils, museums and state agencies since the product was called Voltage Fusion, and turns the findings into decisions: protect, keep, move or dispose.
Discovery can challenge a team's view of what it holds. One council coordinator described an "oh wow" moment. Three published examples, each run by WyldLynx on the OpenText platform under its name at the time.
A 30-day proof of value scanned 500 GB and nearly 400,000 files from a 20 TB estate: 11% were duplicates and 38% were obsolete, with about a third past their retention date. The clean-up was anticipated to save US$60,000 a year in storage, and the scan surfaced a lost collections register and misfiled field footage. Qualifying files moved into Content Manager with sensitive values masked on the way. Read the case study.
Handling more than six million card transactions a year meant moving from PCI DSS Level 2 to Level 1. Discovery across shared mailboxes, network drives and Content Manager found more than 32,000 credit card numbers and 110,000 other sensitive items, including 90,000 passport numbers. Card data appeared within 30 minutes of the first scan. Read the case study (PDF).
One of the fastest-growing councils in the country, serving about 225,000 people, ran a proof of value ahead of Western Australia's new privacy legislation and found bank account details, Medicare cards and driver's licences; the volume of sensitive information surprised the team. The work earned the OpenText Excellence Award for Advocating Data Privacy. Watch the interview.
The examples show different reasons for discovery: sensitive material outside expected controls, redundant or obsolete files, and information that owners need to review before deciding what to do next. iTnews: how WyldLynx protects clients from the dangers of hidden data.
A discovery report is only useful if each finding leads to a decision somebody is authorised to make. These are the six things the platform shows you, and the action each one leads to.
Card numbers, passports, licences, health identifiers, tax file numbers and Australian classification markings, by repository and by owner. Action: protect, mask at source, move under records control or remove, with the evidence of what was there.
Duplicates, superseded versions, files past retention and content nobody has touched in years. Action: approved disposal under the retention authority, with storage reclaimed and a smaller attack surface.
Who owns a collection, when it was last used and whether anyone still needs it. Action: an information asset register with named owners, which supports privacy, audit and governance reviews.
Heat maps of sensitivity by share, site, mailbox and team. Action: fix access on the few places that hold most of the risk before touching the rest.
Documents and decisions sitting in file shares, Teams and OneDrive that belong in Content Manager. Action: capture them with classification and retention, so they are managed rather than merely stored.
Which sources need further review for currency, ownership and sensitive content before an assistant can use them. Action: approve a pilot collection with evidence, rather than pointing Copilot at everything. AI readiness.
OpenText has used four names for this product family: File Analysis Suite, Voltage Fusion, Core Data Discovery & Risk Insights (CDDRI) and now Data Security Platform (DSP). The capability underneath has grown with each release and the job has not changed: discover, classify, assess risk and act, across the systems where unstructured information actually lives.
File shares, SharePoint, OneDrive, Exchange and Teams, Confluence Data Center from the 26.2 release, and OpenText Content Manager itself, so the records system is in scope rather than assumed clean. Connections depend on supported repositories, versions and permissions.
Classification by pattern, context and the Australian identifiers that matter here, with risk scoring and heat maps. Review classification results with your information owners and tune the configuration for the sources in scope.
Mask sensitive values at source, preserve on hold, export, move to Content Manager with masking applied, or carry out approved disposal, each with a recorded decision and an accountable owner. Which actions are available depends on the components licensed and the source configuration.
What is new in the 26.2 release, published under the CDDRI name: Confluence discovery, masking at source, Australian classification updates and the checks to make before upgrading.
A proof of value helps you assess what discovery could deliver in your environment. Report delivery is typically 1-3 months, depending on volume and agreed scope. You choose the repositories and the volume; we connect the platform, run the scan and review the findings with your information owners. The report shows what was found, where the risk sits, what should be protected, moved or disposed of, and what the storage and risk return would be. From there, the next step is yours: a wider rollout, a migration into Content Manager, a privacy programme or an AI pilot on an approved collection.
Discovery answers the question Content Manager cannot ask on its own: what is outside it that should be inside, and what is inside it that should not be. Before a migration, the platform profiles the source so the destination, record types, metadata and retention are decided on evidence; sensitive values are masked on the way in, as Queensland Museum's were. Inside Content Manager, the same discovery finds the card numbers and passport scans that were filed years ago and never classified, which is exactly what the state government entity found in its own EDRMS.
OpenText Content Manager and Microsoft 365 integration. If you run Content Manager and have never scanned it, that is the place to start.
Voltage Fusion proofs of value in 2019, CDDRI projects through the privacy reforms, Data Security Platform today. Carl's team knows the software, as the City of Wanneroo put it, inside out, and provides support from start to finish.
A discovery report lists what is there. Deciding what is a record, what the retention authority allows you to destroy and what a privacy regulator expects takes records practitioners, and ours sit beside the engineers on every project.
Discovery turns up the most sensitive information an organisation holds. WyldLynx is certified to ISO 27001 and runs the work under that management system. ISO 27001.
Masking, disposal, migration into Content Manager, privacy and security governance, support and training: the people who found the problem are the people who fix it. Information security and governance.
Data security posture management is the category name analysts use for exactly this: discovering sensitive data across repositories, assessing its exposure and driving remediation. OpenText positions Data Security Platform as its DSPM offering for unstructured data. Whichever name you use, the questions are where the sensitive data is, who can reach it and what should happen to it.
No. A proof of value scans a defined slice you choose, typically the repositories you are least sure about, and the report tells you where to go next. Queensland Museum started with 500 GB of a 20 TB estate.
It identifies what is duplicate, obsolete or past a retention trigger and groups it for review. The decision to dispose stays with your information owners under your retention authority, with holds and exceptions checked first. We record the decision with the action.
It gives you the evidence compliance depends on: what you hold, where, how sensitive it is and who owns it. The evidence supports compliance work; it does not establish compliance by itself. Your team still needs to apply the relevant controls, responsibilities and review processes.
Yes. File Analysis Suite became Voltage Fusion, then Core Data Discovery & Risk Insights (CDDRI), and is now OpenText Data Security Platform (DSP). Our older case studies and release posts use the name current at the time; the platform and the WyldLynx team behind it are the same.
Yes. The state government entity's project scanned its Content Manager environment alongside shared mailboxes and network drives, and found sensitive material filed years earlier without classification. If you run Content Manager, scanning it is usually the first slice we recommend.
Allow 1-3 months for report delivery, depending on volume and agreed scope. You receive an executive report with the findings by repository and sensitivity, the redundant and obsolete volume, the risk picture and the recommended actions, reviewed with your information owners. Proof of Value.
Where the sensitive information is. What can go. What belongs in Content Manager. Which collections an AI tool may read. Tell us where the information lives and what you want to change, and we will scope a proof of value that answers it. We take your business personally.
