A Fortify 24x7 brand, minding the tills, counters, and back offices that keep trade moving.Trader sign inSpeak to an engineer
CommerceGuard Tech
Stall 05 / Customer ledger

Every business that has traded a while is holding more than it thinks.

A card number typed into an old order note. A customer spreadsheet exported for a mailing and then never deleted. Ten years of invoices on a share nobody has opened since the last office move. Card one finds that material. Card two rules on what anybody is allowed to do with it.

ActifileA search and a scoreEncryption and channel control
2 cards / locate first, rule second / per device
Cards on this board2
Stocked byActifile
Weighed byDevice
Order of workSearching comes first

Finding it is the whole first half

Nobody sets out to keep a copy of a card number. It happens because a customer read one out over the phone and somebody wrote it in the order note so the delivery would not be held up. Multiply that by several years and a couple of staff changes and you are holding material you would have sworn was not there.

Actifile reads the machines and the shares within their reach, identifies payment card and personal data, and gives each device a score for the exposure it carries. The score is the part that earns its keep: an unbounded problem becomes a ranked list, and the first three devices on it are worth a morning apiece.

A ranked list of devices turns an overwhelming problem into three mornings of work.

Then governing it, without moving anything

Card two encrypts what matched, and leaves it exactly where it is. Files stay where staff expect them and go on working the way they always did, which is the only arrangement that survives a busy Saturday. Attempts to carry that material out along the usual routes stop being taken on trust.

Profiles differ by record type, so payment data and ordinary customer records are not treated as one thing. We set them with you rather than at you, because the person who knows why a folder exists usually works there.

On this board

Cards and rates

Rates below are weighed straight off the billing scales the moment this page opens. Lift anything down and it waits in the basket until you are ready.

Fortify-DLP-ClassifyWeighed and priced

Sensitive Data Discovery

A search of the folders, and a figure against each machine

Governing a folder requires finding it first. This card reads the machines and everything within their reach, picks out card numbers and personal records, and then reports the quantity each device happens to be carrying.

  • Payment card and personal material located across machines and shares.
  • A number against every device, which is what puts a clean up into order.
  • Reporting fit to hand an auditor, or an acquirer who has started asking.
Trades onActifile discovery and risk scoring
GuardsFiles on enrolled machines, and the shares those machines can open
Banked forScan results and risk history per device, in the Actifile tenant
Settled byFortify 24x7 engineers reading the scans with you
Weighed byDevice, charged monthly
Weighing per device
weighed monthly, paid ahead
QTY
Fortify-DLP-EnforceWeighed and priced

Encryption and Channel Control

Encryption in place, and the exits under control

The half that does something. Anything that matched is encrypted where it already lives, and the routes material usually departs by stop being taken on trust.

  • Encryption laid over matching files, and not one of them moves house.
  • Control over the applications material genuinely leaves through.
  • Different profiles for different record types, so the rules fit the content.
Trades onActifile encryption and channel control
GuardsPayment and personal records held on enrolled machines
Banked forPolicy and enforcement history, in the Actifile tenant
Settled byFortify 24x7 engineers setting the profiles alongside you
Weighed byDevice, charged monthly
Weighing per device
weighed monthly, paid ahead
QTY
Honest scope

Where this board stops

This is the board most often mistaken for a compliance product, so the boundary matters more here than anywhere else on the site.

  • PCI DSS obligations stay with you and your acquirer. Discovery and encryption support technical controls you may be asked about, and the reporting is useful evidence to hand over. They do not deliver PCI compliance or certification, we are not a Qualified Security Assessor, and nothing on this board issues an attestation.
  • Discovery is not a legal opinion. We will tell you what is on the device. Whether you may keep it, and for how long after that, is a matter for your own advisers.
  • Scanning covers what the device reaches. A share nobody mapped, an old machine in a cupboard, and a supplier system holding your data are all outside what an agent on your endpoints can see.
  • Encryption is not deletion. Material you should no longer be holding is best deleted. Encrypting it is a control, not an answer to the underlying question.
  • We are not your data protection officer. You get findings, evidence, and a straight opinion. Deciding policy and answering a regulator stays with you.
ON THE SPIKE

Heads up: card statements show FORTIFY 24X7 - CommerceGuard Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.