I think document review is a convenient term that means a lot of different things. We are not providing a review tool for relevancy. Instead, we are providing a document review tool to extract affected individuals and build their sensitive information profiles. We highlight protected-data, and you can click to add this information to the individual’s profile, eliminating copy and paste or transcription errors. All the while, the system is intelligently looking ahead at the rest of the data for the same patterns and deduplicating profiles entered by hundreds of reviewers. There are literally dozens of additional features that we introduced to solve the Data Breach Discovery problem. As I mentioned previously, a reviewer can import tables of PII into the master list of entities during first pass review. Canopy classifies images containing protected-data such as an image of a driver’s license or passport and presents all of the images in a gallery view to allow a data analyst to quickly determine if they contain PII or not.  Canopy provides a detailed entity view that allows quality control user to trace all of the discovered protected- data for an individual back to each source document.

We eliminate the manual impact assessment phase, saving approximately 80 to 160 hours of analysis.   We provide a data breach impact assessment report automatically, in hours (the time it takes to process data), instead of a team of people taking a week to ten days. 

When compared to a review-all-documents approach, our clients have been able to reduce the review cost up to 90% by reducing the number of documents promoted to review. To do this, a team uses Canopy’s analytics to surgically segregate documents into three groups:  those that do not contain protected-data, those that contain protected-data, and those that require more analysis. Of course, culling is limited by the percentage of documents containing protected-data elements. Also, during this phase, there is an ability to automate some of the review by providing known lists of protected-data.

We’ve improved the document review speed by at least 20% for documents without tables/spreadsheets.  Taken together, the ability to reduce the volume of data reviewed and increase the efficiency of the review process itself represents the greatest cost savings.

For spreadsheets or documents containing tables, reviewers have been able to map and load tables with ten-thousand rows of protected-data in less than five seconds, as opposed to one hour, as is typical with a traditional review. 

We reduce the one to two-week effort to clean up and normalize the list of entities for notification by over 80%. We also provide unique tools to review and quality-control the final list of individuals.

Ultimately, Canopy reduces the amount of time and resources involved in post data breach discovery while increasing the quality of the list of affected individuals. With Canopy, incident response teams can meet regulatory deadlines while reducing their cost.

We will continue to build out Canopy’s data breach discovery software to enable service providers, legal teams, and consultants to conduct thorough post-data breach response analysis and review with unprecedented efficiency.

We are exploring a couple of other proactive protected-data use cases where our partners have expressed that we have the basis for a killer app.  We feel that applying Canopy’s technology to protected-data at risk is the next logical step.

Harry, thank you for the opportunity to speak with you about our partnership! it’s been wonderful to support LO2 as you’ve formalized your Data Breach Notification Document Review offering.