HCLTech Data Patrol Framework
Overview
Organizations often need help automatically detecting the growing list of sensitive data types and need more visibility into data security risks, especially when ingesting unstructured data. It is critical to identify and protect the sensitive data collected from any unauthorized disclosure, and it is the responsibility of every organization to effectively discover, control and manage their sensitive data footprints and comply with all relevant data protection laws and regulations.
Customers are relying on fully managed data security services that will automate protection against sensitive data leaks and leverage the capabilities of machine learning and pattern-matching techniques to swiftly address these limitations.
HCLTech’s Data Patrol Framework leverages native AWS services to provide end-to-end automation, from scanning the sensitive data at the point of ingestion to dashboarding key insights for business consumption. This ML-powered framework can seamlessly detect several identified and custom sensitive data types catering to any industry, supporting PII protection and strictly adhering to data privacy, compliance and regulatory needs such as GDPR, PCI-DSS and HIPAA. It can support unstructured data and be plugged into any layer that requires sensitive data discovery for the underlying raw source data.
Features
The Data Patrol Framework comprises the following key features, each with several interesting capabilities that are crucial for building a robust and complete data patrolling solution.
We think these topics might interest you
Benefits
Data Patrol's architecture leverages native AWS Services for sensitive data discovery and analytics.
Automated discovery
Fully managed, updated machine learning techniques for PII, PHI, PCI detection and the ability to define and use custom datatypes
Centralized management of sensitive data
Integration with AWS Security Hub provides a comprehensive single view of security findings stored as a standard AWS Security Finding Format (ASFF) for further processing
Secure data isolation and encryption
Effective isolation of highly sensitive data files right at the ingestion layer and prevention of further leakage to downstream systems
Intuitive dashboard
Pre-built ML-driven insights with auto-narratives that are embedded contextually in the dashboard using natural language for quick interpretation
Automated email alert notification
Automated custom email triggers based on discovery findings with critical details on the sensitive data files
Frequently Asked Questions
Data Patrol supports a broad range of sensitive data types out of the box, including PII, PHI and PCI data. Beyond that, we give you the flexibility to define custom data types using regular expressions—so the framework adapts to your specific environment, not the other way around.
Data Patrol is designed to align with major privacy and regulatory frameworks, including GDPR, PCI-DSS and HIPAA. By automating sensitive data discovery and generating consolidated compliance reports for every patrolling job, we help your teams stay audit-ready without the manual heavy lifting.
High-severity detections automatically trigger incident creation in ServiceNow through our integration with HCLTech's iONA (iAct) solution. Each incident is assigned directly to the appropriate user group for review and action—ensuring nothing slips through the cracks and your teams respond quickly when it matters most.
All high-sensitivity findings are aggregated in AWS Security Hub using the standard AWS Security Finding Format (ASFF). This centralized approach gives your security teams a single, unified view of risk across your environment—making it significantly easier to analyze, prioritize and act on sensitive data findings.
Data Patrol is built on native AWS ML and analytics services, with Amazon EventBridge orchestrating alert workflows, Amazon SNS handling notifications and AWS Security Hub centralizing findings management. This CloudSMART approach means we're leveraging purpose-built AWS capabilities—not workarounds—to deliver sensitive data discovery at scale.
Yes, and this is where many solutions fall short. Our Data Patrol Framework is specifically built to handle unstructured data, plugging into any layer where AWS-sensitive data discovery is needed for raw source data. Whether your data is structured, semi-structured or fully unstructured, we've got it covered.
We address leakage at the source. Sensitive data isolation and encryption happen right at the ingestion layer—before any data moves into downstream systems. This proactive approach means high-risk files are secured immediately upon detection, not after they've already traveled somewhere they shouldn't.
Email alerts are automatically triggered by Amazon EventBridge based on findings from sensitive data discovery. Amazon SNS then delivers custom notifications to subscribed users, including the file location and its severity level—high, medium or low—so the right people get the right information without delay.
Absolutely. A consolidated Data Patrol report is automatically generated for each patrolling job and delivered to a client-specified location. This means your compliance documentation is always up to date and readily accessible—no manual report-building required, and no scrambling when an audit comes around.
The Data Patrol dashboard surfaces prebuilt, ML-driven insights with auto-narratives written in plain natural language—embedded contextually so your teams can interpret findings quickly without parsing raw data. From detection summaries to severity breakdowns, it gives business users and security teams a clear, actionable picture of your sensitive data landscape.