Why One E-commerce Software Company Trusts 98% of Its DLP Detections

An employee uploads a spreadsheet of customer data into an unmanaged AI tool for a quick analysis. It takes seconds, and they don’t think twice about it.

At one e-commerce software company, that scenario is a real possibility every day. The company manages customer loyalty programs for thousands of brands, including some of the biggest names in fashion and retail, who trust the platform with their customers’ data. And teams across the company use ChatGPT, Gemini, and other AI tools every day to work faster.

Yet the threat of AI data leakage is real. Security needs to see where sensitive data goes, without slowing anyone down.

That’s where ORION Security came in.

Smart Monitoring of AI Use

ORION flags that type of incident in real time, says the company’s GRC and information security team lead. That helps the company support employee use of sanctioned AI tools, while protecting sensitive data and building awareness of AI risks companywide.

The team lead says ORION’s agentic data loss prevention (DLP) platform has “transformed how we manage sensitive data.” He recalls deploying traditional DLP in the past, where setting up policies took an enormous amount of work and was prone to error.

ORION is built on a different model. Instead of matching data against rules written in advance, it classifies data in real time as it moves. It also reads the context around every movement: what the data is, who is moving it, where it's coming from, where it’s going, and whether that’s normal for that person’s role.

ORION started producing results right after deployment. “It just works pretty much straight out of the box,” he says.

What Full Data Visibility Looks Like

For this security team, full visibility includes activity it might not otherwise know to look for.

For example, ORION gave security visibility into data moving to an internally built platform that hadn’t been on its radar. It flagged activity that, the team lead says, “I don’t think I would have been able to find otherwise.” Discoveries like this give a more complete picture of where company data is going and a chance to assess whether more controls are needed.

Insider and leaver risk is a concern for every company, and Gmail is a common channel for it. With ORION, the team can retrieve data movement history beyond Gmail’s 30-day retention window when the circumstances call for it.

ORION is also helping the company build a more complete map of its data. Because ORION automatically discovers and classifies data as it moves, security has a clearer picture of where sensitive information lives, how it’s used, and who has access to it. The team uses that information to inform access reviews and build policies based on actual data movement across the organization.

“ORION’s automated discovery, detection, and classification capabilities are top-tier,” he says.

Protect your data the moment it moves.

Give us 30 minutes to show you how ORION identifies sensitive data, understands context, and prevents data loss with 95% fewer false positives.

Book a demo

Book a demo

A Signal That Keeps Getting Sharper

Running DLP well also means adjusting it as the security team learns what’s normal and what isn’t.

As the team worked through its detection data, it found opportunities to tune what ORION surfaced. Some findings flagged data movement that turned out to be routine internal activity. Support engineers, for example, were copying organization keys from Salesforce into approved internal tools. That activity was legitimate, and continuing to surface it for review added no value.

The fix didn’t require opening a ticket or waiting on IT. The team lead used ORION’s trusted destination settings to mark approved SaaS tools, so routine data movement to those destinations stopped appearing as findings.

The ORION team also fine-tuned detections based on his feedback. False positives dropped sharply, and security now spends much less time on investigation and remediation.

That feedback loop has continued. The security lead logs product requests directly into ORION’s feature tracker, and those requests have made their way onto ORION’s product roadmap.

The responsiveness started with onboarding. ORION was integrated with the company’s critical systems in about a day, without requiring deep technical expertise. A year and a half later, he says, “I have not worked with more responsive teams in many, many years.”

DLP Verdicts, Not Alerts

Over the last six months, the team lead estimates that about 98% of ORION’s detections have been valid. Security’s time goes toward investigating real incidents rather than sorting through noise.

Accurate findings also change how employees respond. When security raises an issue, employees know it’s worth taking seriously. Those conversations have helped raise awareness across the company about how data should and shouldn’t move.

ORION delivers that level of accuracy because it evaluates the context behind data movement. The company gets visibility as employees adopt new applications and AI tools, without building and maintaining a new policy for each one.

The stakes extend to the company’s own customers. As a data processor, it is contractually obligated to keep shopper data within the systems listed in its data processing agreements, and ORION supports that commitment.

When merchants run security due diligence, the team lead can point to robust DLP with ORION. “We have next-generation DLP that we trust, and we can make sure that data is not leaving our premises,” he says. “I am extremely satisfied working with the amazing ORION team.”

‍