A discovery policy specifies the configuration used when running a discovery operation, including which classifiers are used and how detection results are evaluated. Policies allow organizations to standardize how sensitive data is detected across different environments and datasets.

Policies are applied when running discovery on a ruleset. During execution, the discovery process evaluates the tables and columns defined in the ruleset using the classifiers configured in the selected policy.

Data Control Tower includes several built-in objects that are provided out of the box with the product, including Data Classes, Data Classifiers, and Discovery Policies. These built-in objects are system-defined and cannot be edited or deleted. You can create and manage custom objects as needed.

You can perform the following operations:

Discovery policies (read-only)

Built-in discovery policies

ASDD standard discovery policy

Create a discovery policy

Edit a discovery policy

Delete a discovery policy

Last updated
Oct 8, 2026