Support Mon–Fri · 8 am–6 pm (BRT) Assess your security in 3 min PTEN
gestãodeTI Strategic ITConsultingCyber
SECURITY TIP Turn on two-factor authentication for every critical account.
Under attack?
Talk now Talk to an expert

NEWDigital Shield · Corporate monitoring

Company devices monitored within the law.

We roll out transparent monitoring of company phones and computers in line with the LGPD, CLT and ISO 27001 , with a signed policy, every employee informed and auditable reports.

5compliant monitoring areas
8essential points to monitor within the law
28years in security and investigation
gti://monitoring · complianceILLUSTRATIVE SIMULATION
CORPORATE MONITORINGrolling out…
LGPD32%
CLT25%
DLP40%
ISO 2700118%
Incidents45%
…Starting monitoring assessment
PROGRAM COMPLIANCE 32% 0 of 5 areas compliant

Monitoring and compliance

Every area, explained without the legalese

Choose an area to see what it covers, who needs it and what we deliver so your company can monitor safely and within the law.

Monitoring with a legal basis

The LGPD allows companies to monitor their own resources when there is a legitimate purpose, transparency and proportionality. We set the legal basis and document everything.

WHO NEEDS IT

Every company that monitors devices, email or systems used by its team.

WHAT WE DELIVER

  • Legal basis and legitimate interest assessment
  • Privacy notice for employees
  • Impact assessment (DPIA) for the monitoring

AUDIT EVIDENCE

Monitoring DPIAEmployee noticeIncident log

DLP in practice

Data loss prevention, without watching people.

DLP (Data Loss Prevention) recognizes the company’s sensitive data — tax IDs, customer data, contracts, source code — and stops it from leaving through unapproved channels. It looks at the data, not at the employee’s personal life.

Corporate emailAttachments and messages with sensitive data sent outside the company or to personal accounts.
Cloud and sharingPublic links, uploads to personal drives and external folder sharing.
USB and removable mediaCopies to USB drives and external disks, blocked or forced to be encrypted.
Browser and public AIUploads and pasted data on unapproved websites, including public AI tools.
Printing and screenshotsPrinting of confidential documents logged, with watermarks to trace the source.
Company phonesCompany data stays in the work profile: no copy and paste into personal apps.

SAMPLE RULES

What happens when someone tries to…

Spreadsheet with tax IDs attached to a personal emailBLOCK
Client folder copied to a USB driveBLOCK
Contract uploaded to a personal driveALERT
Client data pasted into a public AI toolALERT
Confidential report printedLOG
Internal file shared with an approved partnerALLOW

HOW WE ROLL IT OUT

In 4 stages, without stopping operations.

01ClassifyWe map and label sensitive data: personal (LGPD), financial, contracts and trade secrets.
02Set policiesFor each data type and channel: allow, alert, ask for a justification or block.
03Start in notify modeAt first we only log and coach, so rules can be tuned without blocking work.
04Respond and reportAlerts handled with context, a monthly report and evidence ready for audits and the ANPD.

Within the LGPD: rules live in the use policy, the team is informed, logs have restricted access and a retention period, and the focus is company data — never personal conversations.

Platforms: Microsoft Purview, Google Workspace, Microsoft Intune and other market solutions.

DLP in depth

Where the data is and how it is recognized.

Good DLP protects data at every stage of its life: stored, leaving the company and in use. And it recognizes what is sensitive by its content, not just by the file name.

AT RESTWhere the data is storedWe scan laptops, servers and the cloud to find where tax IDs, customer data, contracts and confidential documents live — including forgotten folders.
  • Sensitive data map
  • Over-shared folders
  • Encryption where it matters
IN MOTIONWhen data leavesWe inspect what leaves through email, uploads, sharing links and cloud apps, including those IT never approved (shadow IT).
  • Email and attachments
  • Uploads and public links
  • Unapproved apps
IN USEWhen someone handles the dataWe control actions on the device itself: copy and paste, screenshots, printing, USB drives and sending to AI tools.
  • Copy, paste and screenshots
  • USB and printing
  • Generative AI

HOW DLP RECOGNIZES SENSITIVE DATA

Brazilian patternsTax IDs, ID cards, payment cards and bank data recognized and validated.
Document fingerprintingContracts, spreadsheets and the customer base identified even in copied excerpts.
Classification labelsPublic, Internal, Confidential and Restricted, each with its own protection level.
Image reading (OCR)Sensitive data in screenshots, photos of documents and scanned PDFs.
Unusual behaviorUnusual copy volumes, odd hours and mass downloads before someone leaves.
Context of the actionWho, on which device, from where and where the data is going.

COMMON MISTAKES WE AVOID

Turning on broad rules on day one and stalling operations
Covering only email and USB, forgetting cloud, browser and AI
Ignoring false positives until the team tunes out the alerts
Rolling out without a policy and without telling the team
Treating a block log as court-ready evidence

When an alert becomes a case, we preserve the evidence with hashing and chain of custody, so it holds up in employment and legal action.

WHAT YOUR COMPANY RECEIVES
Sensitive data mapRule matrix by channelDLP policy and formsAlert dashboardMonthly reportEvidence with chain of custody

Quick self-assessment

Does your company monitor within the law?

Check what your company already has today. Each item shows the area that solves whatever is missing.

0/8ITEMS OK
EXPOSED

Check the items alongside to see how compliant your monitoring is.

I want a full assessment Nothing you check is sent or saved.

When to reach out

Do you recognize yourself in any of these situations?

Pick yours and talk to an expert. We will point out the right way to monitor without risk.

“We are handing out company phones to the team”MDM ROLLOUT“We need to monitor, without employment-law trouble”POLICY AND LEGAL BASIS“An employee left and the laptop still has data”SAFE OFFBOARDING“The team uses personal phones for work”BYOD AND DATA SEPARATION“We don't know who accesses what”ACCESS CONTROLURGENT“We suspect an employee is leaking data”INTERNAL INVESTIGATION

Monitor with transparency. Protect company data without exposing your team.

Book a consultation

What sets us apart

Why choose Gestão de TI

28years

of experience in security and investigation, serving companies of all sizes and law firms.

  • Fast response in urgent cases
  • Companies of all sizes and law firms
  • Best practices: NIST, ISO 27001, ISO 27037 and LGPD
01 Transparent monitoring, never in secret
02 Policy and forms drafted with our CLO
03 MDM on iOS, Android, Windows and macOS
04 Legal basis and DPIA under the LGPD
05 Internal investigations with chain of custody
06 Staff personal data always kept apart

The Gestão de TI ecosystem

One team to investigate and protect

Gestão de TI services work together, with the same team and the same confidentiality standard. Combine the ones your company needs.

01CyberSecurityPrevention, monitoring and incident responseExplore 02Digital Investigation (OSINT)Open sources, deep and dark webExplore 03Evidence PreservationForensic analysis and chain of custodyExplore
RELATEDAudit, Compliance & Data ProtectionInsider threats, breaches and compliance
05Threat Intelligence & Dark WebMonitoring of hidden forums and marketsExplore 06Fraud & Scam TrackingPIX scams, card fraud, phishing and scamsExplore 07Due Diligence (Individuals & Companies)People, companies and links verifiedExplore 08Law & TechnologyLegal certainty for the digital world.Explore

Tell us your case

Does your company monitor its devices within the law?

Talk to us and assess your situation.

Open a request WhatsApp