Use case
What was in the breach? Find out in hours.
When data is exfiltrated, the ICO clock starts. Upload the affected dataset into Smartbox and get a structured report of what personal data it contained, in which categories, and at what risk level.
Workflow
Four steps to an ICO-ready report.
Ingest
Drop the affected files into a secure Smartbox workspace. Every file fingerprinted with SHA3-256 at first byte, and the custody chain starts there.
Classify
Smartbox identifies personal data, sensitive categories (health, biometric, financial), and third-party data across 14 entity types.
Quantify
Counts, categories, and risk indicators aggregated per data subject and per file.
Report
Export an ICO-ready breach assessment with the audit log attached.
FAQ
Frequent questions on breach forensics.
What file formats can we ingest?
Anything we can read in a SAR workflow — emails, Office documents, PDFs, scans, audio, video, multilingual text.Where is the data hosted while we work?
UK AWS regions by default. BYOC (Bring Your Own Cloud) available for customers who require it.How long does an assessment take?
Hours for typical breach volumes, not the days it takes manually.
Beta open now · General availability January 2027
Take control of your next case.
Join the Gen 2 beta, or see it working on your kind of material in a 60-minute demo.
