Enterprise Governance

Configure your compliance once. Canvos enforces it — everywhere, always.

Six governance pillars, four enforcement points, full audit trail. No more manual checks — the platform does it for you.

Governance that covers every aspect
of your workspace

Configure policies per organisational unit. The platform enforces them automatically with every action.

📋

1. Sharing policy

Determine whether staff may share externally, which file types are blocked, maximum validity of share links and whether public links are allowed. Configurable per organisational unit.

📧

2. Email policy

Mandatory disclaimers, attachment limits, blocked domains, compliance BCC and TLS enforcement. Automatically enforced on every outgoing email.

⏱️

3. Retention policy

Set how long files, emails, chat messages and audit logs are retained. Automatic cleanup after retention period. GDPR-compliant deletion built in.

🏷️

4. Data classification

Four levels: Public, Internal, Confidential, Restricted. Classification is automatically enforced when sharing, downloading and emailing.

🚫

5. DLP rules

Data Loss Prevention: automatically block sharing of sensitive file types, patterns or classifications. Custom rules configurable with notifications and escalation procedures.

📊

6. Compliance reporting

Every policy action is logged per organisational unit. Monthly compliance reports, real-time alerts on violations, and audit export in JSON, CSV or CEF format.

Four enforcement points — no escape

Canvos enforces policy at four levels, so no action can fall outside the policy.

1

API layer

Every API request is checked against the active policy. Violations are blocked before the action is executed.

2

UI layer

Options that are not allowed are not shown in the interface. Users only see what they are permitted to do.

3

Email gateway

Outgoing emails are automatically enriched with disclaimers, checked for attachment policy and blocked on policy violation.

4

Audit & alerting

Every policy violation attempt is logged. Real-time alerts for administrators on repeated violations or escalation patterns.

Full traceability,
per organisational unit

Structured logging on 130+ API routes. Every event contains who, what, when, where and the result of the policy check.

Per-org event logging

Every organisational unit has its own audit stream. No data leakage between departments or teams.

Real-time alerts

Configure alerts per policy type: immediate notification on DLP violation, daily overview, weekly report.

Export in 3 formats

JSON for SIEM integration, CSV for spreadsheet analysis, CEF for enterprise security platforms.

Compliance reports

Automatic monthly reports per organisation. Suitable for internal audits, GDPR documentation and external supervisors.

Four classification levels,
automatically enforced

Label every file, every folder and every email. The classification automatically determines what can be done with it.

Public
Public

Freely shareable outside the organisation. No restrictions on downloading or emailing.

Internal
Internal

Only shareable within the organisation. External sharing blocked unless admin allows it.

Confidential
Confidential

Restricted sharing, no public links, downloads logged. Only specific users or groups.

Restricted
Restricted

Maximum restrictions. No external sharing, no downloads, no email attachment. View only for authorised users.

Configure it once. Canvos enforces it.

Governance is included in every Canvos package — no extra licence, no E5 equivalent needed.

Request a demoOrder now