Appendix B8
AI and message DLP
Control sensitive data leaving through endpoint channels: web uploads, messaging, webmail and AI assistants. Mail quarantine, channel enforcement, one audit log.
B8.1Discovery tells you where data is at rest. DLP covers the moment it moves: a file uploaded to a website, a spreadsheet pasted into a messaging app or webmail, a document dropped into an AI assistant. Seratus watches these endpoint channels with a lightweight endpoint agent, applies the same classification rules used in discovery, and enforces the policy set for that channel: allow, warn or block.
B8.2Outbound mail can be held in quarantine for review before it leaves. Endpoint events are recorded in the same audit log as discovery findings and remediation jobs, so a channel incident and the data-at-rest picture are read together.
B8.3Discovery remains agentless. The endpoint agent is installed only where channel control is wanted, and it is managed from the same console with the same roles and approvals.
Related appendices