Data Protection
Sensitive data today lives in databases, files, the cloud, and AI tools – often in copies no one remembers anymore. We help you find and classify it, encrypt it where it resides, keep keys under control, and know who accesses them. Using Thales and Imperva technologies, with Proofpoint for data sent via email.
47%
of sensitive data in the cloud remains unencrypted – according to the Thales Data Threat Report 2026, an S&P Global study among 3120 IT and security professionals.1
Conclusion: you cannot protect data you cannot see. That’s why we start with discovery and classification, and then encryption, access control, and DLP follow the data – wherever it actually resides.
Scenarios from Thales and Proofpoint studies. Most leaks don’t require a sophisticated attack – a data copy in the wrong place, a mistake, or a compromised account is often enough. For each: what our technology does in this situation.
Database copies in test environments, exports to spreadsheets, old file shares. They cannot be protected if they are not in any inventory. Only 39% of organizations can fully classify their data.1
Thales CipherTrust: discovers and classifies sensitive data in on-premises and cloud repositories and shows where the risk is highest.4
Almost half of sensitive data in the cloud is unencrypted.1 A misconfigured resource or a compromised cloud administrator account is all it takes for it to fall into the wrong hands.
Thales CipherTrust: encrypts files, directories, and volumes without application changes, and the keys to data encrypted across multiple cloud providers remain under your control.4
An administrator – real or someone who has taken over their account – usually has access to all server content. In a Proofpoint study, 42% of organizations cite compromised accounts, and 32% disloyal employees as the cause of the biggest data loss.3
Thales CipherTrust: access control based on the principle of least privilege determines which accounts and processes see data in plain text.4
A leak rarely looks like an attack. It’s just regular database queries – but at an unusual scale, at an unusual time, or from an account that previously didn’t need that data.
Imperva Data Security Fabric: records access to sensitive data, including privileged and application accounts, learns normal traffic, and alerts on deviations.5
Autocompleted address, wrong attachment, file sent to a private inbox. 58% of organizations attribute the biggest data loss incidents to careless employees.3
Proofpoint Adaptive Email DLP: learns sender habits based on over 12 months of correspondence and warns or blocks messages to unusual recipients, with incorrect attachments, or to private accounts.6
A contract fragment, source code, customer list in a chat window. 44% of organizations admit they lack sufficient visibility and control over GenAI tools.3 According to Thales, 61% of organizations consider AI the biggest risk to data security.1
Proofpoint: DLP policies cover email, cloud, workstations, and web – they can allow, block, or report the transfer of company data to ChatGPT or copilots.7
Disk and backup encryption is standard today. The trouble begins where data is used, copied, and sent.
Disk encryption protects against hardware theft, but not against someone who logs into a running system.
Thales
The Thales CipherTrust platform combines data discovery and classification, encryption, tokenization, and key management. Data remains where it is – in databases, files, and the cloud – and you decide who sees it in plain text.4
A complete picture of sensitive data: where it resides, what it pertains to, and where the risk is highest.
CipherTrust Transparent Encryption encrypts files, directories, and volumes and combines this with access control based on the principle of least privilege.
Tokenization and dynamic data masking in existing applications – only those who need full data can see it.
CipherTrust Application Data Protection provides cryptographic functions via API when data needs to be protected in the code.
CipherTrust Manager centrally manages encryption keys across the organization.
CipherTrust Cloud Key Manager gives you control over keys and policies for data encrypted across multiple cloud providers.
CipherTrust and Luna HSM are Thales solutions; Imperva also belongs to the Thales group.
Imperva
Thales Luna HSM
Email remains the primary channel for document exchange – and the most common attack vector. That’s why we describe email protection and the people who use it in a separate area: phishing and impersonation, compromised accounts, outbound messages, and risk-based training.
Article 21(2) of the directive lists, among mandatory measures, the policy on the use of cryptography and – where appropriate – encryption (h) and access control and asset management (i).9 In Poland, this is implemented by the amended National Cybersecurity System Act (KSC Act), effective from April 3, 2026.10
Article 32 indicates pseudonymization and encryption of personal data as exemplary measures to ensure processing security.11
Article 9 requires that ICT tools of financial entities maintain a high level of availability, authenticity, integrity, and confidentiality of data – at rest, in use, and in transit.12
Regulations do not specify products. We help translate these requirements into concrete measures: you know where your data is, who has access to it, and how it’s protected – and you can demonstrate this to an auditor.
SafeWave has been operating since 1998 as a vendor-agnostic integrator. We conduct implementations in stages so that protection does not halt company operations.
We determine where sensitive data resides – in databases, file shares, the cloud, and email – and how it is currently protected. Result: a data map and a list of highest-risk areas.
We match the measure to the data: encryption, tokenization or masking, access monitoring, DLP. We determine where the keys will be – in CipherTrust Manager, in HSM, or in the cloud.
We start with the most sensitive datasets and in monitoring mode to avoid disrupting applications. Then, database monitoring with Imperva and Proofpoint email policies.
Policy tuning, access reviews, audit reports, and Polish-language support.
Let’s start with a review: where sensitive data resides, who has access to it, and what is encrypted. Based on this, we will propose a sequence of actions.