Skip to main content

Discover and catalog sensitive data

Warning

This feature is currently in Public preview and is not widely available to all customers. Keep in mind that you will need to purchase an add-on to use this feature. For more details, please reach out to your Customer Success specialist.

What is Sensitive Data Classification?

Sensitive Data Classification, is a method that employs machine learning to automatically identify and categorize sensitive data in your source technology. Sensitive data can be Personal Identifiable Information (PII), Protected Health Information (PHI), or Payment Card Industry (PCI) information, to name a few. After scanning the source technology and classifying the data, the collector uploads this classification metadata to data.world. Users can then view these classifications for resources cataloged from their source technology.

Collectors can scan any table, accessible via SQL, that contains at least one row of data. It does not have a limit on the number of tables it can scan. Tables are scanned at the column level.

Note

The scans are performed on your source technology. However, it does not perform scans on live connected datasets or virtualized data assets within data.world.

The collector selects data from each table to classify by querying the first n rows in the table, where n is the selected sample size. If the table has fewer than n rows, then the collector will query all the rows. The sampling uses TABLESAMPLE where it is available, and depending on the implementation in the database, the actual number of rows sampled may vary.

Sensitive Data Classification utilizes private.ai to categorize your data. The collectors take a sample of data from the source technology, sends the sampled data to the Private AI instance provided by the user for classification, and then captures the classifications in the collector output.

As the model is integrated with the collectors, no data is sent to private.ai and the private.ai library does not directly connect to or read from the source database. Data utilized for classification is not used for model training. Since the collectors only catalogs classification metadata, the actual data used in the classifications is not stored on the data.world platform.

Sensitive_Data_Discovery_diagram.png

Key Features

Sensitive Data Classification consists of four main features:

  • Scan: The tool scans multiple data sources. It uses pre-trained machine learning to instantly identify over 30 types of sensitive data.

  • Classification: This feature allows you to distinguish between various types of sensitive data and apply specific rules for handling each type. For example, the term confidential could have a unique meaning within your organization. By applying the confidential classification, you can apply your business logic to the data.

  • Action: All the information obtained is completely reportable. You can generate a report detailing all your assets, including the sensitive data types and classifications applicable to them.

  • Integration: Finally, you have the option to export these reports to your preferred BI tool to integrate them into a broader system or project.

Supported languages for the content processed from the source

  • The Collector can be run on content in various languages. For the complete list of languages supported, see the Private AI documentation.

Which Collectors support sensitive data classification for metadata?

The Sensitive data classification feature is available for the following collectors:

  1. Snowflake collector 

  2. SAP HANA collector 

  3. MS SQL Server collector 

  4. MySQL collector 

  5. PostgreSQL collector 

  6. Redshift collector 

  7. Db2 collector 

  8. Databricks collector 

  9. Teradata collector 

  10. Oracle collector 

  11. Denodo collector 

  12. Netezza collector 

What data is scanned by the collectors for sensitive data classification?

Table 1.

Object

Data scanned

Column 

  • Classification Types: Address, Bank Account Number, Bank Routing Number, Blood Type, Credit Card, Expiration Date, Credit Card Number, Credit Card Verification Code, Date, Drug, Email Address, Healthcare General, Healthcare Identification Number, Identification Number, Injury, IP Address, Medical Condition, Medical Process, Numerical PII, Occupation, Organization, Origin, Passport Number, Password, Person Name, Phone Number, Physical Attribute, Political Affiliation, Religion, Social Security Number, Time, URL, User Name, Zodiac Sign, General, None

    This is a subset of the entity types supported by private.ai. For a description of these entity types, see the Private AI documentation.

  • Observation Count 

  • Average Score 

Sensitive Data Classification Provider 

  • Name

  • Version

    Note: currently only private-ai is supported.



A sample view of sensitive data classification information for metadata:

  1. Browse to the resources to see the type of sensitive data.

  2. On various product pages such as Search results, Resources, use the Sensitive Type filter to narrow down lists by sensitive types attached to the resources.

    sensitive_data_classification.png

Setting up an instance of Private AI

Depending on where your collectors are deployed, there are two ways to connect to a Private AI instance: one for on-premise environments and one for cloud deployments.

  • If you are running collectors on-premise, you must set up a Private AI instance within your environment and configure the collectors to connect to it using the base URL. This URL must point to a running and accessible Private AI instance. See the private-ai documentation for information about creating a private ai instance. For assistance with setup and licensing, please contact your customer representative.

  • If you are running collectors in the cloud, the collectors will automatically use the data.world–hosted Private AI instance. No additional configuration is required in this case.

Enabling Sensitive Data Classification for metadata

You can enable profiling for metadata by using the following optional parameters for the collectors that support sensitive data classification.

Important

Before you begin, ensure that the Sensitive Data Classification module is deployed and configured through CTK.

In this section: