We are considering a scanning solution for detecting Personal Information (PI) in our data assets, mainly AWS S3, DynamoDB, Salesforce, etc. We need the solution to detect PI, identify the type (e.g., infotype), and optionally map it to our own PI categories. We are currently considering BigID. Do you have experience with this tool or any other tools that can help us scan across different data platforms and technologies?

Giving this a bump because I’m curious about implementation hurdles - after doing some market research some of the concerns are not whether there is a tool (because there are many ways) but the following :
1). Would you give access to all your systems to one tool if it was even technically possible to allow it to “crawl” assets because this seems like a big security concern to me ?
2). If not then that would mean you have a “push” instead of pull model meaning the business users must declare new software, data and network assets manually?

I have some experience with relyance.ai and gaudai.com. Recommend to check them too.

AWS has tools for this to leverage but requires some DIY work to implement - any reason not to leverage existing infrastructure ?

I have posed a similar question, but actually want to protect sensitive information via a masking or redaction process in unstructured file types and wondering what is out there and what is working.

I don't have a recommendation, but I am following because we are conducting a similar evaluation. We are also evaluating BigID and Microsoft Purview with Infotechtion. We are trying to cover some of our records management requirements at the same time.