Your data stays yours. Everywhere it goes.

Data loss prevention, data discovery, insider-risk controls and endpoint management in one agent and one console, running on your own servers.

Explore the platform Get a demo
Every point is a device. Blue traces pass, red ones are stopped.Move the pointer to pull the network
Self-hostedConsole and evidence stay in your network
One agentDetection, enforcement and management
Works offlinePolicy cached, events queued
Signed updatesStaged rollout you control

Nine products. One platform underneath.

Every product shares one agent, one policy engine and one console. Point at a product to see how it connects, open it to see everything it does.

Tracemark platform

One agent · one console · one policy for every channel
DiscoverFind sensitive data
ClassifyLabel it by risk
EnforceAllow, warn or block
InvestigateIncidents and cases
Protected channels

Endpoint/Email/Web and AI/Cloud storage/USB and devices/Print/Screen

Works with

Active Directory/Microsoft 365/Exchange/Outlook and Office/Chrome, Edge, Firefox

Cloud connectors

Amazon S3/Azure Blob/Google Cloud Storage/Google Drive/Box/Dropbox

Runs on

Windows/Windows Server/macOS/Linux

One product where most companies run five.

DLP, classification, device control and endpoint management usually come from different vendors, with different agents and different consoles. Tracemark is one.

One agent, one console

A single agent on each device does detection, enforcement and management. One console shows every incident, device and policy.

Runs where your data lives

Install Tracemark on your own servers. Content, evidence and recovery data stay inside your network.

Protection that keeps working

Agents enforce the last policy they received when the server is out of reach, and send their events once it is back.

Built for people at work

Warnings explain themselves, exceptions take a sentence, and blocked apps can be requested from the block itself.

The policy line.

Data moves through every channel at once. Tracemark draws one line across all of them: what is restricted stops there, everything else keeps moving.

Data Loss Prevention
Move the pointer to move the line

A name on every screen.

Restricted documents carry the viewer's name, machine and time across the screen, which makes a phone photo a poor way to leak.

Insider Risk
Point at the screen

Only what you approved runs.

Devices and applications pass a gate. Approved ones go through; the rest turn back, and people can ask for access from the block itself.

Endpoint Control
Blue passes, red turns back

Start from the problem.

Each line leads to the product that solves it.

Stop data leaks

Block sensitive data on USB, email, print, browser uploads and the clipboard with one policy.

Secure AI adoption

Let people use AI tools while keeping customer and company data out of prompts.

Know your sensitive data

Find it, label it and see who can reach it across devices, shares and cloud storage.

Manage insider risk

Deter screen photos, see risky behaviour early and investigate with evidence.

Lock down endpoints

Allow only approved devices and software, with time-boxed exceptions.

Run IT operations

Support users, patch and deploy software from the console that protects them.

Close weak spots

Find vulnerable software and misconfigurations, fix them and keep them fixed.

Protect the inbox and the brand

Remove phishing from every mailbox and spot domains that imitate yours.

Be ready for the auditor

Evidence from the data you already collect, reports on a schedule, and roles that see only what they need.

Every desktop, one console.

Native agents for each operating system report to the same policies, incidents and reports.

PlatformWhat runs there
Windows and Windows ServerThe full platform: DLP on every channel, classification in Office and Outlook, device and application control, remote control, patching and software deployment.
macOSClipboard and content DLP with the same detection engine and policies as Windows.
LinuxClipboard and content DLP, plus live remote control.

Three months. Free.

New customers get the whole platform for three months, installed on their own servers, with our team helping set it up.

  1. Ask for it

    Leave a work email. We call back to agree the scope and the terms with you.

  2. Install

    Put the console on your own server and the agent on a test group of machines.

  3. Use everything

    Every product is switched on for three months. Start in audit mode, enforce when you are ready.

  4. Decide

    Keep going on a paid plan, or remove the agent. Your data never left your network.

Claim three months Talk to sales first

See Tracemark on your own data.

Tell us a little about your company and we will set up a walkthrough of the products you care about.

Resources.