Sensitivity Scanning

1Security includes a powerful, built-in sensitivity scanning engine designed to automatically identify and classify sensitive data across your Microsoft 365 environment. This engine runs securely without requiring advanced Microsoft licenses, making robust data protection accessible to every organization.

How We Perform the Scan

Our sensitivity scanner is designed for efficiency and accuracy. When a file or email is discovered, 1Security processes its contents using a combination of technologies to detect over 300 types of sensitive information (such as credit card numbers, personal identification numbers, and financial records).

Here is how the process works:

1. Extraction: We securely extract text from documents, spreadsheets, presentations, and emails.
2. Optical Character Recognition (OCR): For images and scanned documents, we use built-in OCR technology to read the text within the images.
3. Pattern Matching: The extracted text is evaluated against our extensive library of sensitive information patterns.
4. Risk Assessment: Files containing sensitive data are flagged in the permission graph and dashboards, allowing you to instantly see who has access to your most critical data.

Supported Formats and Limitations

To ensure performance and reliability, the scanner focuses on the most common file formats used in business environments:

• Supported Document Formats: .txt, .csv, .docx, .pdf, .xlsx, .pptx
• Supported Image Formats (OCR): .jpg, .jpeg, .png, .gif, .bmp, .tif, .tiff, .webp
• Emails: Email bodies are enriched and scanned.

Performance Limitations:

• File Size: Files up to 50 MB are supported. Files larger than this limit are skipped to ensure the system remains fast and responsive.
• PDF Limits: For PDF documents, the scanner processes up to the first 5 pages to optimize performance while capturing the most relevant context.
• Embedded Images: For formats like Word documents (.docx), up to 10 embedded images are processed with OCR per file.

Licensing Requirements

A key advantage of 1Security is its accessibility. You do not need expensive, premium Microsoft licenses to achieve deep security visibility.

Nearly every functionality in 1Security is available with a standard Microsoft 365 Business Basic license.

The only exceptions that require advanced Microsoft licenses are:

• Security Alerts: Requires Microsoft Defender to pull native security alerts into 1Security.
• Sensitivity Labels: Requires Microsoft Purview if you want to sync and display Purview's native sensitivity labels alongside 1Security's findings.

Note: Even without Microsoft Purview, 1Security's independent sensitivity engine will still successfully classify and analyze your sensitive data.