Challenges

eCapital's goal was clear: understand how data flows through their organization in real time, who is touching it, where it is going, and whether that movement is authorized.

Conventional approaches to data visibility, classification, DSPM, static data mapping, were never designed to follow data as it moves. They produce a picture of where data lives, not what happens to it the moment a user touches it.

"From a data flow and data movement perspective, those controls amount to zero. We did not want to spend time, effort, and funds on classifying the data estate. You can still have the data stolen, ransomed, exfiltrated. With Bold, we can see how users interact with the data and what they are actually doing with it, and then do something about it. We loved Bold’s innovative approach to identity-centric, user access focus on data handling, throughout the enterprise and outside the enterprise boundaries."
Stefan Lesaru, VP, Technology & Compliance

The Gap - No Existing Tool Was Built to Close

Modern user behavior has outpaced the tools designed to govern it. Users paste proprietary information into public AI models, & without realizing it enters the public domain. Files get compressed, renamed, and sent through channels that bypass every perimeter control. These are not sophisticated attacks, they are everyday behaviors that static, classification-based tools are architecturally incapable of seeing or addressing.

DLP was not the answer either. It relies on rigid rules, has no visibility into the browser or AI activity, and can be bypassed with trivial techniques.

"With DLP, you do not have visibility in the browser or into other areas where users operate. Users do not realize they are putting information into the public domain, pasting proprietary data into public AI models, things that are escaping every other tool."
Stefan Lesaru, VP, Technology & Compliance

Solution

eCapital deployed Bold's on-device AI platform to accomplish what other solutions could not, real-time visibility into how data moves, & data flow use cases with the ability to act on it in real-time and prevent the risky action.

Because Bold runs locally on the endpoint, it classifies data as it moves and enforces policy at that exact moment, before exposure occurs.

"You can see the flows, you can see what users are doing without even configuring policies, right out of the box when deployed."
Stefan Lesaru, VP, Technology & Compliance

Within weeks, Bold surfaced behaviors no other tool could see, proprietary data pasted into public AI models, files renamed and exfiltrated through channels that bypassed every perimeter control, unauthorized data movement across browsers and external services.