Automating PII detection & audits is a hard problem! Especially across sundry data storages and formats. Compliance firms typically provide a high-level paper

Automating PII detection & audits is a hard problem! Especially across sundry data storages and formats. Compliance firms typically provide a high-level paper trail, but what happens when you don't even know where the PII data is, like the OP says? What if you need to answer concrete individual Subject Access Requests? So, as a technology company, we've attempted to solve parts of it with technology. We really hope to make that pesky "PII stuff" detection and auditing easier for companies: https://pii-tools.com https://pii-tools.com (in private beta, feedback welcome)