Check the content
Card-number candidates with a checksum, email addresses, supported secret patterns and your own literal keywords. See detector counts without exposing matched values in the audit log.
A DELIBERATE BOUNDARY FOR DATA
Check what
leaves.
Keep the receipt.
A controlled file gateway for small teams. Inspect text, CSV, JSON and text-only DOCX, hold sensitive content, and deliver approved files to permitted recipients in your team’s receiving inbox.
25 submissions a month. No card required. Your username, password and recovery key work across devices.
ONE SUPPORTED PATH, VISIBLE DECISIONS
Make every crossing
an explicit decision.
Review with context
Allow, block or quarantine. Record a decision, grant a short exact-file exception, or replace the source and retest. A closed incident alone never releases bytes.
Verify the handoff
A worker checks current policy again. The receiver confirms the workspace, destination grant and file hash. Permitted recipients download the receiving copy and acknowledge it; retries keep the same idempotency key.
A CLEAR FIRST RELEASE
Useful protection starts
with a defined boundary.
Send individual UTF-8 files and self-contained text-only DOCX through the browser or a submit-only connector. Owners set the policy; reviewers handle quarantine; senders submit files; readers inspect the record.
Coverage is limited to this gateway. It does not monitor desktops, email, cloud drives or network traffic. PDFs, images, OCR, general archives and encrypted files are rejected. DOCX is limited to self-contained text: embedded files/images, macros and external content are rejected.
Pattern matching can miss sensitive data and flag harmless content. Test your policy with synthetic files before adoption. This is not a malware scanner or a compliance certification.
FOLLOW THE FILE THROUGH
A hold is a beginning.
Every blocked or review submission creates an incident. Record the investigation, submit a corrected replacement and keep the link between the original and its passing retest. Team access and connector credentials can be revoked without losing the audit trail.
START WITH A CONTROLLED PILOT
Two plans.
One accountable path.
All plans include scoped accounts, policy versions, incidents, exceptions, exports and the gateway connector.
FREE / EVALUATE
£0
25 submissions per workspace per calendar month
2 workspace accounts (team + recipients)
30-day payload retention
PRO / OPERATE
£19.99/ month
or £199.99/year · no trial
5,000 submissions per workspace per month
10 workspace accounts · 90-day payload retention
Upgrade from the Plan tab after creating your workspace. If Pro lapses, retain read, export and revocation access while the service operates. Cancellation takes effect at the paid period’s end.
Privacy, terms and operating limits
DLPTool is operated by Yolleg Ltd (10455920). Contact: [email protected]. Username accounts require no email. Keep your recovery key private; without it or a valid password, the operator cannot restore account access. Store a current encrypted backup separately.
File contents, filenames, incident notes, exception reasons and audit details are encrypted at rest using a private runtime key. Card, email and secret matches are logged as counts, not raw excerpts. Authorised owners and reviewers can retrieve retained quarantine files. Workspace names and usernames are metadata. Backups contain account credentials and the storage key inside a separately encrypted archive.
Only use records you are authorised to process. This hosted edition delivers to a tenant-scoped receiving inbox on this service. Owners permit recipient username accounts and set receiving access expiry, from 1 minute to 30 days. Permitted recipients retrieve the separate acknowledged receiving copy without server-operator involvement. Access revocation stops future retrieval but cannot recall downloaded copies. Receiver copies are separately retained for at most 30 days; deleting a gateway copy does not immediately delete its receiver copy. There is no email/cloud-drive interception or arbitrary external destination integration. Payloads are removed by maintenance after 30 days on Free or 90 days on Pro; account and incident metadata persist while the workspace operates. Audit entries retain at most 90 days or 50,000 entries. Export records before expiry. Infrastructure administrators with runtime keys can decrypt records.
The service is provided within the published gateway scope, without a promise that it detects every disclosure or fulfils any specific regulatory obligation. Pro is £19.99/month or £199.99/year, including tax where applicable; recurring billing, no trial. Cancel through the subscription portal. Existing records remain readable and exportable after lapse while the service operates. Payment is collected by Stripe. Statutory consumer rights are preserved; contact the operator for billing support.
CONTROL ROOM