Enterprise Recon

Ground Labs is a data discovery software company founded in Australia in 2007 by Peter Duthie, which now operates through Ground Labs Pte Ltd in Singapore with entities in the United Kingdom and the United States. It helps organisations find personal and payment card data that sits unprotected across servers, endpoints, databases and cloud services so that they can meet PCI DSS and privacy laws.

Enterprise Recon scans structured and unstructured data with agent, agentless, API and proxy-based methods across Windows, Linux, macOS and Unix hosts, more than a dozen database engines, Microsoft 365, Google Workspace, AWS, Azure, Salesforce and email systems. It recognises more than 300 pre-configured data types across over 50 countries, scores risk and lets users redact, quarantine, encrypt or securely delete findings. It comes in PCI, PII and PRO editions, on premises or as Enterprise Recon Cloud in the customer's AWS account.

• Broad data source coverage: Scans servers, endpoints, databases, cloud storage, Microsoft 365, Google Workspace and email.
• 300+ data types: Pre-configured PII and card data patterns for over 50 countries plus custom GLASS patterns.
• Remediation: Redact, quarantine, encrypt or securely delete sensitive data in place.
• Risk scoring: Prioritises locations by sensitivity and exposure with alerts and reports.
• Flexible deployment: Agent, agentless, API and proxy scanning on premises or in the customer's AWS.
• Integrations: Microsoft Purview classification, REST API, ODBC for Power BI and Tableau, SSO via Entra ID.

A Vietnamese bank or payment company can locate stray card numbers on file servers and endpoints before a PCI DSS audit. An insurer or hospital group can inventory citizen ID and health data across databases for its data protection impact assessment. A retailer can find and purge customer data kept beyond its retention period.

Organisations gain a full inventory of where personal and card data actually resides, including in file shares, mailboxes and endpoints that are often missed. Findings can be remediated in place, reducing the volume of exposed sensitive data. Custom patterns and country-specific data types support local regulations beyond GDPR and PCI DSS. Ground Labs reports more than 4,500 organisations in 85 countries using its products.

Privacy laws such as Singapore's PDPA, India's DPDP Act and Vietnam's Personal Data Protection Law require organisations to know where personal data is stored before they can protect it or answer data subject requests. Card payment growth in Southeast Asia also keeps PCI DSS scope reduction a recurring need for banks, retailers and payment providers.

Founded in Australia in 2007 by Peter Duthie as a bootstrapped venture. In March 2026 Duthie acquired full ownership through a buyout of his former business partner and returned as Founder and Chief Architect. Licensing entities are Ground Labs Pte Ltd (Singapore), Ground Labs Limited (UK) and Ground Labs Inc (US). Enterprise Recon Cloud is listed on AWS Marketplace; G2 High Performer 2026.