01 · Connect
Connect
Wire in email, file storage and chat through one connector per source.
Data & More is a multi-tenant GDPR and data-governance platform. It connects to an organisation's email, file storage and chat systems, reads everything it finds, classifies every document for personal and sensitive data, and helps the data owner act on it. This page is the map: what the platform does, how the parts fit, and where to read the detail.
You cannot govern what you have not first read, classified, and understood.
The platform runs continuously, not on a fixed quarterly cadence. The process has a name, Classify, Verify, Delete: the platform classifies what sits in the archive, the data owner verifies the findings on their own ground, and the result is deletion (or archive, edit or restrict) carried out in the source system. Sources and exceptions are the one-time configuration that feeds the loop.
Each source is wired through one of the platform's ingestion connectors. The cycle starts here and writes findings back here too.
Deletion is never automatic. The data owner reviews each finding locally and picks one of three actions, recorded in the audit log.
Every request enters through one TLS-terminating NGINX proxy and is routed to the application tier: the Vue client, the main Flask API, and the IAM, analytics and LLM services. The API hands slow work to an asynchronous backbone of Celery workers over RabbitMQ, which also carries the scan, ingest and enforce events for the Java tier. The heavy lifting (crawling sources, extracting text, enforcing policy) runs in that Java tier. Underneath it all sits the data layer, with Elasticsearch as the document store every service shares.
The full service estate, gateway, tenancy and delivery model are covered in Platform Architecture below.
A document makes the same journey every time. A source is configured once; from then on the platform crawls it, extracts its text, profiles it for personal data, checks it against the tenant's policies, acts on the verdict, and reports the result. Cheap, deterministic stages run first; the expensive AI and enforcement steps run only on what reaches them.
Wire in email, file storage and chat through one connector per source.
Crawl each source and extract text, including OCR for images and scans.
Profile every document for personal and sensitive data against the taxonomy.
Check findings against the tenant's retention and sensitivity policies.
Edit, archive, restrict or delete, always confirmed by the data owner.
Dashboards, alerts and exportable reports for evidence and audit.
The map above stays deliberately shallow. Four focused field manuals carry the detail, each one owning a distinct layer of the platform with no overlap between them.
This overview is the entry point to the Deep Dive section. Read it for the shape of the whole platform, then follow a link above to the layer you need. Each deep dive is self-contained and assumes only what is on this page.