Data loss prevention identifies and monitors sensitive data to stop unauthorised leaks. On-prem fence · cloud content awareness · file audit—combined for your environment.
Think of it as three steps:
Use formats, keywords, content analysis, or other classifiers to spot personal, financial, and confidential business data.
For example: “files with sensitive data must not be shared outside the company.”
Log the event, notify admins, warn the user, or block outright; some policies allow a business justification to proceed.
We match your environment—on-prem file servers, Microsoft 365 email & Copilot, or full cloud—
and combine the right controls. The three complement each other; it is not either/or.
See who did what, when, to which file. Read/write/delete/move audit; anomaly / bulk-access alerts; compliance reports and audit trail.
Fit: need an audit trail, trace accidental deletes / leak sources, or strengthen file-server visibility.
Sensitive files stay in the zone—no copy-out, email-out, or screenshot exfil. Zone protection; block USB / Save As / email / print / screen capture / copy-out; CAD-friendly; optional local encrypted disk.
Fit: local file servers; design / engineering / HR / finance shares; need hard blocks, not alerts only.
One policy set for email, Teams, cloud drives, and Copilot. Content detection & sensitive info types; audit / warn / block; covers Exchange, Teams, OneDrive, SharePoint, Endpoint.
Fit: already on Microsoft 365; need control of email attachments & cloud sharing; Copilot in use; or files already fully in the cloud.
These product cards complement each other—see each sub-page. Most SMEs stack by environment rather than picking only one.
A one-liner to match your setup.
Email / OneDrive / SharePoint / Teams
Single product
Microsoft Purview DLP
Start with stronger audit—know who touched which files, without tipping off staff
Single product
BlackAudit
Need the strictest controls and heavy restrictions
Single product
Curtain eLocker
Hybrid products
Email — Microsoft Purview
Local files — Curtain eLocker
Map where files live, how you use M365, and key risks.
On-prem shares, email / Copilot, or full cloud—align the environment first.
Recommend eLocker / Purview / BlackAudit by environment.
We will not push products you do not need.
Deploy policies, zones, or monitoring scope in stages.
Minimise impact on day-to-day work.
Review alert / block reports and tune policies as needed.
Local Hong Kong support.
Not necessarily. Most stack by environment: eLocker for on-prem shares; Purview for email / Copilot; add BlackAudit for detailed file audit. All-cloud M365 can lead with Purview alone.
BlackAudit focuses on seeing who did what (audit / alerts); eLocker hard-blocks—sensitive files cannot be copied, emailed, or screen-captured out. One leaves a trail; the other is a fence.
If critical files still sit on on-prem file servers / CAD shares, eLocker still adds value; use Purview DLP for email, Teams, cloud drives, and Copilot.
Free assessment of your environment → combination advice & quote → roll-out → ongoing policy / alert tuning.
Please select at least one service
Design draft: form not wired yet. Once live, enquiries go to enquiry@opsc.com.hk (no CC). For now please use WhatsApp, phone, or email.
