Email Redaction
Email Redaction identifies and redacts sensitive content (PII, financial data, legal documents, etc.) archived in user mailboxes. Users can still access messages on-demand in their mailbox after an authentication step.
About Email Redaction
Email Redaction automatically identifies and redacts sensitive messages in mailboxes and allows them to be accessed on-demand, when needed by users after they verify their identity via an authentication step. Time to redact and the type of content protected is flexible and can be specified based on your company’s security policies. Message retrieval is immediate after a user completes a simple verification step (e.g., Okta Verify Request).
Material logs every message retrieval. To review them, from the left navigation expand Email Redaction, then click Message Access Log. To view statistics for your environment, including the number of protected messages, retrieval count, and success rate, from the left navigation expand Email Redaction, expand Reports, then click Email Redaction.
Other solutions, like DLP filters, block emails in transit but ignore the thousands of sensitive messages in your users’ mailbox archives. If an attacker (or malicious insider) gains access to an inbox, this at rest sensitive content is at risk of being exfiltrated. This forces an impractical trade-off between the security risk of retention and the productivity hit of deletion.
With Email Redaction, you can add a layer of protection to sensitive content while still keeping it accessible when needed. This protection can be enabled wall-to-wall or for a subset of accounts or groups.
Deployment
See the Deployment Guide.
FAQ
Where does sensitive content go after being redacted?
Messages are stored in a storage bucket inside your private, dedicated Material cloud instance. When a user retrieves a message or if Email Redaction is disabled for a user, messages are returned to the mailbox in their original form (including attachments, message metadata, etc.).
Can Email Redaction be disabled after-the-fact?
Yes, you can disable Email Redaction at any time, which restores all redacted messages.
What messages are considered sensitive?
Material has built-in Sensitive Content Categories that are automatically identified and protected. Admins can enable or disable built-in categories and define their own categories.
Can users still search for redacted messages in their email?
Users can search for messages by subject, recipients, date and other message metadata that is preserved post-redaction.
Additional Resources
Last updated
Was this helpful?