Browse categories
Explore
Fiverr Pro
English
$
USD
I will find where your sensitive data is and control who can reach it
Lead Security Architect for Cloud, AI and Zero Trust
Lead Security Architect, 14+ years across banks, telecom and large enterprises, ex-IBM and TOTVS.
Most clients know something is wrong but not where. I find it, then I design what replaces it and the...
Vetted by Fiverr Pro
Marlon Costa was selected by the Fiverr Pro team for their expertise.
Vetted for
Cloud Computing
Cybersecurity
Data Governance & Protection
DevOps Engineering
Regulatory Compliance Consulting
Support & IT
About this Gig
Vetted Pro
Do you actually know where your customers' personal data is?
Most companies do not. It is in a CRM, in exported spreadsheets, in years of email attachments, in a database nobody has opened since its author left.
You are probably here because
- A client, auditor or regulator asked and you could not answer
- Someone left and you do not know what they downloaded
- Staff are pasting company data into AI tools
What I change
- What sensitive data you hold, where it is, and who reaches it
- Classification applied, so files carry their own sensitivity
- Loss prevention that blocks real leaks without stopping work
- Retention, so you stop keeping what should have been deleted
How it works
- You tell me what systems hold data and we agree the scope
- I discover, classify and put the controls in place
- You get the map, the documentation and a walkthrough
What you can count on
Nothing is deleted without a legal hold process agreed first. Discovery changes nothing.
Works with
Microsoft 365 and Purview, Google Workspace, SQL and NoSQL, file shares.
Mapped to GDPR, ISO/IEC 27701 and ISO 27001.
Tell me what systems you have and I will say which package fits.
Expertise:
ISO
•
GDPR
•
Compliance
My Portfolio
FAQ
Are you a lawyer or a DPO?
No, and that is the point. Lawyers tell you what the rule requires. I find where the data actually is and put the technical controls in place. Many clients use both.
Will loss prevention rules block my team's work?
Not if they are tuned. I start in audit mode so you see what would have been blocked before anything is, then enforce only what is worth enforcing. A rule people work around is worse than no rule.
We have no idea what data we hold. Is that a problem?
That is the normal starting point and it is what Basic is for. You get the map first, and only then decide what to protect.
Do we need Microsoft licences for this?
Some controls need specific Purview or Entra plans. I tell you what your current licences already allow and what would need an upgrade, before you spend anything.
Can you help with a deletion or access request we already received?
Yes, but message me first. That has a deadline and it is different work from a governance programme, so I will scope it separately instead of squeezing it into a package.
