Where personal data lives and where it goes — without covert monitoring.
Piservo DLP finds national IDs, IBANs and card numbers on your file shares and controls them on USB drives, e-mail and services like ChatGPT. It runs entirely on your own servers. We are currently in an early access programme.
The picture today
In most organisations personal data sits where nobody looks.
Folders open to everyone
Staff lists, payroll, customer IBANs in the “Shared” folder, readable by anyone.
Spreadsheets pasted into AI
With the best intentions, an employee pastes a customer list into a chatbot to summarise it.
USB and personal e-mail
A file goes to a USB stick or a personal mailbox, and leaves no trace.
Data discovery
Inventory first: which file holds how much personal data.
Scans file shares and folders on a schedule and reads inside Word, Excel, PowerPoint, PDF, text and CSV files. It never changes files or permissions — it only reads and reports.
- National IDs, IBANs and card numbers are validated, not just pattern-matched — fewer false positives
- Four-level classification: Public, Internal, Confidential, Restricted
- List of files open to broad groups such as Everyone or Domain Users
- A “KVKK data inventory” report by category, folder and file
Browser & AI services
Use AI — just don’t send it customer data.
A Chrome and Edge extension checks content at the moment of paste, file upload or drag-and-drop. If personal data is found, it logs or blocks according to policy and tells the user why.
- AI services: ChatGPT, Gemini, Copilot, Claude, DeepSeek, Perplexity and others
- Webmail, cloud storage (Drive, OneDrive, Dropbox, WeTransfer…) and web messaging as separate categories
- Your organisation’s own domains can be allow-listed
Elif Yıldırım;10*******46;TR12 **** **** 4521
Can Demir;27*******10;TR56 **** **** 9902
Endpoint
USB, phones, printers and the clipboard.
A driverless Windows agent enforces policy even while the device is offline. When uninstalled, it restores the device’s previous settings.
- USB and SD cards: allow, read-only or block; detection of personal data in files copied to USB
- Phone and tablet connections: allow or block
- Print logging: document name, user, printer and page count
- Clipboard: monitor, or block when it contains personal data; on-screen watermark with user and date
Three layers on outgoing e-mail.
Piservo Mail Gateway inspects the subject, body and attachments of outgoing mail. An Outlook add-in warns users before they send. Microsoft 365 can additionally be monitored directly.
- Gateway modes: monitor, quarantine (admin approves) or reject
- Options for external recipients only, a minimum record threshold, treating encrypted attachments as sensitive
- Works with Exchange, Microsoft 365 and Google Workspace
Transparency
Employees see what is monitored — and what isn’t.
The agent doesn’t hide. Users open “What is monitored on this computer?” to see the controlled channels and the organisation’s privacy notice, and learn the reason whenever an action is blocked.
- Not built in, by design: keylogging, password capture, covert camera, microphone or screen recording
- Content is inspected on the device; only counts and masked samples (10*******46) reach the server
- Mandatory two-step verification on the console; Administrator, Security Analyst and read-only Auditor roles
Notice: To protect personal data, the channels above are monitored on this device…
Console
Simple enough to install yourself.
Fully on-premises
Installed on your own server. Only the licence check goes out; no inbound connections.
Incident handling
Incidents filtered by severity and status: new, in review, closed.
Mass rollout
Deploy the agent via GPO or your software distribution tool; devices enrol with a time-limited token.
Tamper-evident audit
Admin actions, module activations and evidence access in a tamper-evident log.
Turkish interface
Light and dark themes; a short explanation next to every setting.
Connected to Piservo
An integration that opens DLP incidents as tickets in Enterprise Management is in preparation.
Roadmap
What’s in early access, and what comes next.
Everything above works today. With our early access customers we are working on:
- Stage 1
File and network blocking
Content- and label-based control of file writes, network shares and FTP/SFTP.
- Stage 2
SIEM and MSP console
Event export to the SIEM you use; a multi-customer console for service providers.
- Stage 3
On-prem Piservo AI and policy packs
Incident summaries, OCR, ready-made KVKK and PCI-DSS policy packs, new data types.
Early access
We are starting with a limited number of organisations.
Who it’s for
Organisations that process personal data, want to demonstrate compliance technically and prefer on-premises deployment.
What you get
Installation support, direct contact with the product team and a voice in the roadmap.
Does it watch employees’ screens or keyboards?+
No. Keylogging, password capture and covert camera, microphone or screen recording are excluded by design. Users can see what is monitored on their computer’s transparency screen.
Does our data go to the cloud?+
No. Piservo DLP runs entirely on your own servers. Content is inspected on the device; only counts and masked samples reach the server. The only outbound traffic is the licence check.
Does it block copying to USB?+
You can set USB to read-only or block it entirely. In allowed mode, personal data in files copied to USB is detected and logged as an incident.
Why early access?+
The core of the product works; we want to mature it in the field together with our first customers. Early access organisations work directly with the product team during rollout.
More from Piservo
Let’s map your personal data.
In an early access call we scan one of your file shares together and produce your first KVKK data inventory report.