Platform · Endpoint DLP
Employee devices are where sensitive data is created, edited, copied, and shared. GuardStance Endpoint DLP inspects USB transfers, printing, clipboard pastes, screen captures, sync folders, and browser uploads—online or off the network.
Book a demoCustomer records head for a chat app.
A user attempts to copy a classified document to a USB drive. The endpoint policy evaluates the activity and determines whether the transfer should be allowed, recorded, or blocked.
Every decision is logged with the matched content, user justification, device details, and policy context for immediate investigation.
The agent sees USB, print, clipboard, screen capture, sync clients and uploads.
The detection engine checks what the data is, not just where it goes.
The same rule decides: monitor, warn, record or block.
Every decision is recorded with what matched and why.
Read-only, block, or allow by device ID.
Including virtual printers and print-to-PDF.
Rules per application.
OneDrive, Google Drive, Dropbox and browser uploads.
The policy still applies when the laptop leaves the office.
Warn, ask for a reason, or block quietly, per policy.
No. The same agent also finds and labels sensitive data, so there is one rollout, one update channel and one thing for the help desk to know. Discovery, classification and enforcement share one policy and one evidence store.
Yes. The agent keeps a cached copy of the policy and keeps enforcing it on the road. Evidence is uploaded when the device is back in touch with the policy server.
That depends on the policy. The user can get a short warning, be asked for a business reason, or see that the action was blocked and why. Silent monitoring is also possible while you tune the rules.
