Case Study

Blend needed to protect its banking partners’ customer PII, including Social Security numbers, income records, and more across email, web browsers, and removable media for their Windows-based endpoints and managed through API access.

Industry: Finance & Banking
Prevent the exfiltration of sensitive data, including SSN, income records, and other sensitive data
Implementing Endpoint Protector Unify, including Device Control and Content Aware Protection
Improved insight into user actions, greater visibility into data movements, seamless API implementation

Blend is a leader in the fintech industry, with many of the largest financial providers using Blend’s cloud-based banking platform to streamline workflows such as mortgage applications. As such, the company needed to protect its banking partners’ customer PII stored on their Amazon Workspaces architecture, including Social Security numbers, income records, and more across email, web browsers, and removable media for their Windows-based endpoints.

Unfortunately, Blend’s existing Data Loss Prevention (DLP) solution lacked the ability to protect data loss at the endpoint, and didn’t have API access - critical to its infrastructure as code approach - leading them to look for a replacement.

The Solution

To address these concerns, Blend turned to Endpoint Protector Unify by CoSoSys - the industry’s only API-first, endpoint DLP solution. They embarked on a comprehensive implementation strategy, which involved setting up policies to improve insight into user actions, oversee data movements, and identify particular keywords and confidential information.

Leveraging the platform’s Content Aware Protection functionality to inspect and contextually scan data for sensitive PII, Blend is able to monitor for confidential information and oversee data movement, thus significantly enhancing their data protection measures.

With the API-driven architecture of Unify, Blend can now automate infrastructure as code, facilitating seamless integration of DLP policy changes through a streamlined process of creating pull requests on GitHub. This sophisticated automation ensures that approved code modifications are efficiently pushed to Endpoint Protector Unify, establishing a robust audit trail for enhanced accountability. Additionally, the introduction of an API into the Unify platform allows them to verify the presence of security agents across all anticipated devices, bolstering confidence and assurance for their customers.

By embracing automation, enhancing visibility, and exerting control over security configurations and policies, this solution empowers Blend’s security operations team to maintain a resilient security posture, particularly in the intricate and dynamic landscape of AWS. The platform not only fosters transparency but also reinforces accountability in the management of security-related changes, contributing to a more secure and well-governed IT environment.

Why Endpoint Protector?
  • Data and file transfer monitoring and remediation
  • Flexibility and detailed control over content movement
  • Fast and easy implementation process
  • Detailed monitoring and reporting
  • API-driven to support automation initiatives
Our favorite thing about Endpoint Protector is the granularity of the Content Aware Protection. Being able to drill down exactly into not only the types of data that we're looking for but in the file types and all other things.
Jeffrey Plotts
Security Operations Engineer at Blend Labs
Let’s talk about your use case Fill in the form below to get in touch with one of our DLP experts
Data Loss Prevention Best Practices
Download our free ebook on
Data Loss Prevention Best Practices

Data Loss Prevention (DLP) tools have become an essential part of data protection strategies. Highly flexible and adaptable to any company size, DLP solutions can be tailored to different needs and support compliance efforts with new data protection regulations. This whitepaper outlines the best practices companies should adopt when implementing DLP tools.

Request Demo
* Your privacy is important to us. Check out our Privacy Policy for more information.