Classified
0
Resources with evidence
Operations
Governance overview
Classification, document access and control evidence.
Loading governance evidence…
Governance evidence is temporarily unavailableThe service did not return a complete response.
Role workspace
Your governance workspace
Loading the actions and evidence available to this account.
Least-privilege access
Restricted
0
Highest sensitivity
Review queue
0
Restricted or confidential
Evidence coverage
0/100
Recorded actions, not certification
Document catalogue
Files organised by business purpose
Latest completed run
Waiting for classification evidence
Classification
Sensitivity distribution
Processing path
From intake to evidence
-
01
Private intakeChecking
The browser or CLI requests a short-lived upload and writes the file to the private raw-data bucket.
S3 raw zone -
02
Automatic triggerChecking
An S3 Object Created event travels through EventBridge and invokes the classifier without a manual scan.
EventBridge -
03
ClassificationChecking
The Lambda function strictly extracts supported text, validates Malaysian PII patterns, and calculates sensitivity, confidence, and a review-priority baseline.
Lambda -
04
ProtectionChecking
Non-public data receives a redacted clean copy and governance tags. Restricted results also raise an alert.
S3 clean · SNS -
05
Proof and reviewChecking
Versioned results and hash-linked audit events are stored, then surfaced here for investigation and review.
DynamoDB
Demonstrated scope
This Learner Lab release proves text detection, fail-closed multi-page OCR, irreversible pixel redaction for scanned PDFs, tagging, alerts, versioned evidence, signed webhooks and audit chaining. Incomplete or low-confidence extraction requires human review. Malware quarantine, Cognito, WAF and an external trust anchor are not claimed here.
Evidence history
Recent classification decisions
| Resource | Document type | Sensitivity | Confidence | Priority | Classified |
|---|
No classification evidence yetUpload a controlled sample to start the pipeline.
| Resource | Document type | Sensitivity | Signals | Confidence | Priority | Timestamp |
|---|
No resources match this viewChange the filter or upload a supported document.
Recorded actions
Tamper-evident audit trail
The API recomputes every retrieved SHA-256 event hash and chain link. This detects modification and interior deletion; an external trusted checkpoint is still required to detect tail deletion or wholesale replacement.
Checking ledger0 events
No audit events yetEvents appear after a successful classification.
File retrieval evidence
Short-lived links issued
Every protected or original link receives a correlation ID before it is returned to the user.
| Resource | Copy | Actor | Access basis | Issued | Correlation |
|---|
No file links issued yetOpen a protected or approved original copy to create retrieval evidence.
Storage zones
Control comparison
Compare the raw ingestion zone with the protected output zone. Each result comes from the current posture response.
—
Least-privilege workflow
Original-file access
Reviewers use protected copies by default. Every request for an original is explicit, time-limited, and decided by an administrator or data owner.
0 pendingLoading access scope
Deployment truth
Control coverage
0 active controls
0 production integrations
Decision queue
Access history
| Resource | Requester | Reason | Status | Expiry |
|---|
No access requestsRequests appear here when a reviewer needs a time-limited original.
Operational governance
Move evidence from detection to accountable action.
Record reviews, coordinate security incidents, preserve governed resources and checkpoint the audit head without copying detected personal values.
Response register
Security incidents
| Incident | Severity | Status | Resource | Updated |
|---|
No security incidentsControlled response records appear here.
Evidence preservation
Retention and checkpoint evidence
API-first product boundary
One protection engine. Every application.
External systems submit documents to DataSentinel and consume classification, policy and protected-copy results without rebuilding the security pipeline.
Application identities
Integration control plane
Create, rotate and revoke scoped machine identities without exposing stored secrets.
Copy this credential nowFor safety it will not be shown again.
| Application | Scopes | Status | Expires | Webhook |
|---|
No managed API clientsCreate the first scoped identity for an external application.
Outbound events
Webhook delivery evidence
Callbacks contain decision metadata only. Personal values and storage locations are never included.
| Event | Application | Destination | Status | Delivered |
|---|
No webhook delivery evidenceDelivery records appear after an integrated application submits a document.
Authenticate the application
A temporary machine credential is verified by SHA-256 hash and resolved to a tenant, client and explicit scopes.
GET /api/v1/whoamiCreate an idempotent job
The same idempotency key always resolves to the same document and job, preventing accidental duplicate processing.
POST /api/v1/documentsUpload directly and privately
A five-minute signed S3 policy binds the content type, tenant, client, document identity and five-megabyte limit.
S3 private intakeConsume a safe decision
Clients receive sensitivity, document type, risk and signal types—never the detected personal values.
GET /api/v1/jobs/{job_id}Retrieve the protected copy
The external API exposes only the protected result through an audited link that expires after 120 seconds.
GET /api/v1/documents/{id}/protected-copyOriginals stay human-governed
External clients cannot request originals. Original access remains in the approval workflow for administrators and data owners.
Protected by designDeveloper contract
Designed for integration, not screen scraping
Tenant boundaryEvery object and record is namespaced by tenant and client identity.
Asynchronous processingStable document and job resources separate upload acceptance from completed classification.
Evidence by defaultProtected-link issuance creates a correlation record before the URL is returned.
Fail-closed resultsUnsupported or unproven content remains review-required instead of silently becoming public.
Explainable governance
Preview protection decisions before deployment.
Select signal types rather than personal values. DataSentinel evaluates the versioned profile and shows the decision, review requirement and protected-copy obligation.
Expected outcome
Decision evidence
Choose a profile and signal typesThe simulation never needs the detected personal values.