At Matters.AI, our mission is to serve as the AI Security Engineer for Data, helping security teams automatically discover where sensitive data resides, monitor who is interacting with it, and rapidly neutralize exposure before it leads to a breach.
August is all about investigative depth, visibility into data movement, and closing the loop on cloud exposures.
Here is a breakdown of everything we shipped in August 2026.
1. Data Lineage for SaaS & Endpoints
When an incident response team identifies a sensitive file at risk, the immediate question is always: “How did it get here, and who accessed it?”
Historically, answering this required stitching together disparate logs across endpoint agents and cloud provider dashboards.
What’s New
Data Lineage is now live for OneDrive, SharePoint, and Endpoint files. Security teams get full, unified visibility into the entire lifecycle of a sensitive file directly within the Matters.AI console.
Key Capabilities & Coverage
- Coverage: OneDrive, SharePoint, Endpoint files.
- Full Lifecycle Tracking: Reconstruct the complete activity history across Create, Modify, Download, and Share events.
- Cross-Ecosystem Traceability: Seamlessly map a file’s entire journey across your environment, tracking its movement as it travels from cloud storage like OneDrive down to a local Endpoint, without losing context or chain of ownership.
- Forensic Chain of Custody: Quickly determine scope and impact during security incidents or build verifiable audit reports for compliance reviews.
Impact: Faster, more confident incident investigation with zero blind spots around sensitive file interactions.
2. Duplicate File Detection
Data sprawl is one of the leading contributors to an expanding attack surface. Redundant, forgotten copies of sensitive datasets scattered across employee endpoints and SaaS storage create unnecessary legal and compliance liabilities.
What’s New
Matters.AI now automatically flags duplicate copies of sensitive files across your Endpoint and SaaS environments, allowing security and data teams to enforce data minimization policies proactively.
Key Capabilities & Use Cases
- Coverage: Endpoint, SaaS environments.
- Redundancy Mapping: Identify all instances and locations where duplicate sensitive files exist.
- Prioritized Cleanup: Flag scattered or unnecessary duplicates for one-click access restriction or automated cleanup.
- Data Minimization: Reduce audit overhead and shrink your overall data exposure footprint by keeping only primary, authorized source files.
Impact: Proactively shrink your attack surface by finding and removing redundant sensitive data.
3. Data Flow Map (Self-Hosted Environments)
Data compliance regulations (such as GDPR, HIPAA, and CCPA) require organizations to demonstrate precise mapping of sensitive data movement across infrastructure. For hybrid and on-premises environments, manual mapping is often error-prone and outdated as soon as it’s completed.
What’s New
We are introducing Data Flow Map, providing dynamic visual architecture maps of how sensitive data moves across your databases.
Key Capabilities & Use Cases
- Coverage: Self-hosted database integrations.
- Visual Data Pathways: Instantly visualize sensitive data flows between databases, schemas, and pipelines.
- Audit-Ready Proof: Generate documented proof of sensitive data flow mapping to satisfy auditors and regulatory compliance frameworks.
- Streamlined Reporting: Eliminate hundreds of hours of manual infrastructure and data-mapping documentation.
Impact: Clear, demonstrable visibility into sensitive data movement across databases to satisfy strict regulatory standards without manual labor.
4. One-Click Remediations for Major Cloud Storage
Finding an exposed S3 bucket or overly permissive cloud container is only half the battle. Context-switching between detection alerts and cloud provider console dashboards slows down response times and increases risk exposure.
What’s New
Following our launch of SaaS file-level remediation in July, we’ve extended direct console Remediation Actions to native cloud storage across AWS S3, Google Cloud Storage (GCS), and Azure Blob.
Key Capabilities & Use Cases
- Coverage: AWS S3, Google Cloud Storage (GCS), Azure Blob.
- Direct Misconfiguration Fixes: Neutralize exposure findings (e.g., publicly accessible buckets, misconfigured storage containers) directly from the finding view inside Matters.AI.
- Access Control Adjustment: Correct overly permissive access or broad sharing configurations across multi-cloud environments in a single click.
- Audit Trail: Every action taken in the console is automatically logged for complete forensic accountability.
Impact: Drastically reduces Mean Time to Remediate (MTTR) by allowing security analysts to fix cloud misconfigurations directly alongside detection.
August Updates at a Glance
- Data Lineage: Full activity history and lifecycle tracking across OneDrive, SharePoint, and Endpoint files.
- Duplicate File Detection: Surface redundant sensitive files across Endpoint and SaaS to shrink your attack surface and minimize data.
- Data Flow Map: Dynamic visualization of sensitive data movement across self-hosted databases for audit-ready compliance reporting.
- Cloud Remediation: Direct, one-click remediation actions for AWS S3, Google Cloud Storage (GCS), and Azure Blob exposures right from the console.
All of these capabilities are live in your Matters.AI console today. Log in, trace your sensitive file lifecycles, and experience the new updates firsthand!