Done-For-You Service

The SensiHub Data Risk Assessment

We scan your cloud drives, email, and file shares for exposed PII, HIPAA and PCI content, permission sprawl, and years of ROT — then walk you through exactly what we found and clean up the worst of it. Done for you, powered by the SensiHub platform.

Request an assessment
⚡
Planning a Copilot or AI tool rollout? AI tools surface whatever data they can reach — old contracts, stale credentials, personal files — to anyone who asks. Deploying on an ungoverned environment is how oversharing incidents happen. This assessment closes that gap before you flip the switch.
What you get

Everything included, start to finish

This isn't a scan report that lands in your inbox with no next step. You get a full engagement: scan, report, call, and remediation — delivered by the same person who built the platform.

01
Full environment scan
Google Drive, Gmail, OneDrive, SharePoint, Dropbox, Box, S3, or local file servers. We run SensiHub's full detection suite across everything in scope — PII, HIPAA/PHI, PCI, credentials, and ROT across the entire environment.
02
Findings report
A prioritized, plain-English report: where your sensitive data lives, who can access it, what's duplicated, and what's years past its retention window. Yours to keep and show your auditor, insurer, or leadership.
03
Walkthrough call
60 minutes, screen-share, no jargon. We go finding by finding and agree on what gets quarantined, deleted, re-permissioned, or kept. You decide — we document every decision in the audit log.
04
Remediation of top findings
We don't just hand you homework. The highest-risk items get fixed as part of the engagement, with every action captured in a timestamped audit log you can share with compliance or legal.
How it works

Four steps, measured in days — not months

Kickoff (30 min)

Scope the environment together. Connect read-only access to the sources you want covered. We handle the technical setup — you don't need to prepare anything.

We scan

Typically 2–5 business days depending on data volume. You don't need to do anything. We'll flag if anything unexpected comes up mid-scan.

Report & walkthrough

You see everything we found, prioritized by risk. We walk through each category together and agree on what to act on — quarantine, delete, re-permission, or suppress.

Cleanup

Top findings remediated during or immediately after the call. Full audit trail delivered — every action logged with timestamp, actor, and affected file path.

Pricing

Fixed price. No surprises.

One-time engagements, scoped upfront. No hourly billing, no scope creep charges. What's on the card is what you pay.

One source
Single-Source Audit
$1,950 one-time
One cloud source or one file server. Full scan, report, and remediation included.
  • One cloud source (Google Workspace or Microsoft 365) or one file server
  • Up to 25 users / ~2 TB of data
  • PII, HIPAA/PHI, PCI, credential, and ROT detection
  • Prioritized findings report (yours to keep)
  • 60-minute walkthrough call
  • Remediation of top 25 findings
  • Full audit log of every action taken
Request this assessment →
Full environment
Full-Environment Audit
$4,500 one-time
Up to four sources — cloud and local. The complete picture of your data risk.
  • Up to 4 sources (cloud + local file servers)
  • Up to 100 users / ~10 TB of data
  • PII, HIPAA/PHI, PCI, credential, and ROT detection across all sources
  • Prioritized findings report (yours to keep)
  • 60-minute walkthrough call
  • Remediation of top 100 findings
  • Permission-exposure report and folder-ownership map
  • Full audit log of every action taken
Request this assessment →
Larger environment or an MSP looking to offer this to your clients? Contact us — we do custom scoping and white-label engagements.
Stay clean after we're done

Don't let it pile up again

Everything in your audit runs on the SensiHub platform. When the engagement ends, you can keep it: continuous scanning, alerts on new sensitive-data exposure, and the same quarantine and audit-log workflow your team just used — from $149/mo. Most audit clients do.

See platform pricing →
Who runs your audit

Not a vendor. A practitioner.

Steven Warren, founder of SensiHub
Steven Warren
Founder, SensiHub & MW4 Digital LLC
Your assessment is run personally by Steven Warren, SensiHub's founder. Before starting SensiHub, Steven spent years as the technical lead for sensitive-data cleanup inside two enterprise organizations — running the scans, moving exposed files, working through access issues with department heads, and keeping the remediation log clean enough to hand to an auditor. He built SensiHub because the tools that existed were either out of reach or stopped at detection without ever closing the loop.
FAQ

Common questions

Is this safe? What access do you need?
Read-only access, scoped only to the sources you approve. Nothing is deleted or moved without your explicit sign-off on the walkthrough call — every action requires your confirmation first. Every step is logged in the audit trail: who did what, when, and on which file.
What do you detect?
SSNs and government IDs, payment card data (PCI DSS patterns), HIPAA/PHI content, FERPA records, exposed credentials, and more. Plus ROT classification: duplicate files, stale documents past retention windows, and content flagged by age and extension patterns. The same detection engine used in the SensiHub platform.
How is this different from Varonis or BigID?
Those are excellent enterprise platforms — six-figure annual contracts, months-long deployments, and professional services engagements before you see a single finding. This is a fixed-price engagement measured in days, built for organizations of 10–200 people that need real findings and real cleanup without a year-long rollout.
We're an MSP — can we resell this?
Yes. We offer white-label audits and multi-tenant platform pricing for MSPs and consulting firms who want to offer data risk assessments to their clients. Contact us to discuss custom scoping and partner pricing.

Ready to find out
what's actually in your data?

Tell us a bit about your situation and we'll reach out to schedule a kickoff call — usually within one business day.

No commitment. We'll reach out to talk through scope and timing.

Prefer to try the platform yourself →