Module 03 · Data Discovery
You cannot protect what you cannot find.
Erasure requests, breach scoping and RoPA all start with the same question: where is the personal data. Neostra scans your systems and answers it at field level.
app.yourcompany.in
Scan results · PostgreSQL (prod)
payments.transactionsvpa
UPI VPA0.99
users.kyc_documentsid_number
Aadhaar0.97
billing.invoicestax_id
PAN0.94
s3://exports/2026-08customers.csv
PAN0.91
Capabilities
Detection tuned for India.
Connect your sources
PostgreSQL, S3 and DynamoDB connectors today, with structured and semi-structured data covered.
India-specific identifiers
Aadhaar, PAN, UPI VPA, GSTIN and IFSC are first-class detections, not regex bolted on afterwards.
NLP entity detection
Names, addresses and contact details are found in free text, not just in neatly labelled columns.
Field-level confidence
Every finding carries a confidence score, so your team reviews the ambiguous cases instead of all of them.
Feeds your data map
Findings roll up into the inventory that RoPA generation and breach scoping both read from.
Scheduled rescans
Systems drift. Re-run scans on a schedule and see what personal data appeared since the last one.
Why it matters
The map behind every other obligation.
An erasure request you cannot fulfil completely is a failed request. A breach you cannot scope is a breach you cannot report accurately. Discovery is the unglamorous work that makes the rest of the program honest.
Scan complete: PostgreSQL (prod)
Scan complete: S3 (exports)
Inventory updated
How it works
Live in days, not quarters.
1
Connect
Add read-only credentials for the systems you want scanned. No agents to install on your servers.
2
Scan
The scanner walks your schemas and objects, classifying personal data with a confidence score per field.
3
Act
Review findings, assign owners and feed the inventory that RoPA, DSAR and breach scoping all depend on.