Wizards Security Ecosystem: Oblivio, Nocturno, Revelio, and Detecto
In an era of strict GDPR regulations and growing cybersecurity threats, Polish companies must build resilient organizations. The key lies in a comprehensive approach to data protection and IT processes. Wizards offers four integrated tools – Oblivio, Nocturno, Revelio, and Detecto – that work together in one ecosystem. This allows management to centrally handle data retention, anonymization, and sensitive information detection across the infrastructure. These tools are essential for legal compliance and for avoiding severe penalties.
Oblivio
Oblivio is a solution for personal data retention and enterprise data management. It allows organizations to define storage rules (e.g., based on contract validity) and automatically delete or anonymize information once the legal basis for processing expires. For example, when a client contract ends or an employee leaves the company. Oblivio detects the loss of legal grounds and, after supervisor approval, initiates anonymization across linked systems (e.g., CRM and marketing tools), maintaining data consistency.
Without such a system, outdated data may remain processed unlawfully. In practice, companies might still collect and share data for which they no longer have consent. This violates Article 17 GDPR (right to erasure) and Article 5 GDPR (data minimization). Under Article 83 GDPR, such violations may result in fines of up to EUR 20 million or 4% of the company’s global turnover.
Nocturno
Nocturno is an anonymization engine that uses extensive dictionaries and generators to retain the structure of production-like data. It enables organizations to process large datasets across many systems while ensuring consistency post-anonymization. For instance, an IT firm uses Nocturno to replace real names, national IDs, or tax numbers with synthetic equivalents in test environments.
Without anonymization tools, unencrypted personal data might leak during development or testing. This breaches Article 32 GDPR (security of processing) and Article 5 GDPR (lawfulness and integrity). Polish labor law also obligates employees to protect company interests and confidential information (Art. 100 §2 pt. 4 of the Labour Code). Violations may lead to disciplinary penalties or even civil liability.
Revelio
Revelio helps discover sensitive or personal data in shared files (e.g., emails, desktop folders, cloud drives). It identifies documents and business processes that generate confidential files and suggests digitalization. For instance, Revelio can scan network drives to find outdated spreadsheets with customer data, allowing the company to proactively manage document risk.
Without regular scanning, files may remain unprotected and unknown to IT teams. This breaches Article 5.1(a) GDPR (lawful and transparent processing) and Article 32 GDPR, as well as internal security policies. Labor Code Art. 100 §2 pt. 4 obliges employees to safeguard company information. Failure may lead to fines, disciplinary actions, or administrative penalties. The Polish DPA may impose fines of several million euros under Article 83.
Detecto
Detecto scans databases to find personal or sensitive data (e.g., national IDs, financial data). It monitors changes in database structures to identify areas requiring anonymization or retention. For example, an IT department can use Detecto before launching a new CRM to locate legacy data and take appropriate measures.
Without data mapping, companies lack visibility into sensitive data exposure. This can lead to leaks during migrations and violates Article 32 GDPR. (failure to implement adequate safeguards) and obligations under Poland’s Cybersecurity Act. Sanctions can reach EUR 10 million or 2% of global turnover, and in severe cases, up to EUR 20 million or 4% of turnover. The President of UKE may also impose fines up to 10% of turnover for failing to report major ICT incidents.
Conclusion
Deploying Oblivio, Nocturno, Revelio, and Detecto builds legal compliance and operational resilience. These four tools form a cohesive defense against data breaches and penalties. Contact Wizards today to ensure your organization stays protected and regulation-ready.