Historically, data leak investigations were fragmented. You identified overshared or sensitive content in DSI, then had to pivot to another tool or manual process to actually remediate it. That handoff cost time and pushed up MTTR when speed mattered most!
By early 2026, that friction will disappear. ๐๐๐ญ๐ ๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐๐ง๐ฏ๐๐ฌ๐ญ๐ข๐ ๐๐ญ๐ข๐จ๐ง๐ฌ ๐ฐ๐ข๐ฅ๐ฅ ๐ข๐ง๐๐ฅ๐ฎ๐๐ ๐ ๐ง๐๐ญ๐ข๐ฏ๐ ๐ฉ๐ฎ๐ซ๐ ๐ ๐ฆ๐ข๐ญ๐ข๐ ๐๐ญ๐ข๐จ๐ง ๐๐๐ญ๐ข๐จ๐ง ๐ญ๐ก๐๐ญ ๐ฅ๐๐ญ๐ฌ ๐๐๐ฆ๐ข๐ง๐ฌ ๐๐๐ฅ๐๐ญ๐ ๐ฌ๐๐ง๐ฌ๐ข๐ญ๐ข๐ฏ๐ ๐จ๐ซ ๐จ๐ฏ๐๐ซ๐ฌ๐ก๐๐ซ๐๐ ๐๐จ๐ง๐ญ๐๐ง๐ญ ๐๐ข๐ซ๐๐๐ญ๐ฅ๐ฒ ๐๐ซ๐จ๐ฆ ๐๐ง ๐๐๐ญ๐ข๐ฏ๐ ๐ข๐ง๐ฏ๐๐ฌ๐ญ๐ข๐ ๐๐ญ๐ข๐จ๐ง ๐ฐ๐ข๐ญ๐ก๐จ๐ฎ๐ญ ๐ฌ๐ฐ๐ข๐ญ๐๐ก๐ข๐ง๐ ๐๐จ๐ง๐ฌ๐จ๐ฅ๐๐ฌ ๐จ๐ซ ๐ฐ๐๐ข๐ญ๐ข๐ง๐ ๐๐จ๐ซ ๐ ๐ฌ๐๐ฉ๐๐ซ๐๐ญ๐ ๐ซ๐๐ฆ๐๐๐ข๐๐ญ๐ข๐จ๐ง ๐ฌ๐ญ๐๐ฉ.
The value here isnโt the delete action itself. Itโs being able to act at the moment exposure is confirmed, not after the investigation is done. A few points are:
๐๐ปPurge actions are driven by investigation search results.
๐๐ปThe capability is enabled by default.
๐๐ปExisting controls remain enforcedโDLP, retention, labels, and legal holds are respected.
๐๐ปThe action complements DSIโs AI-based categorization and search, so remediation stays context-aware.
Preview starts in January 2026, with GA expected by March. Itโs not a headline feature, but it materially improves how investigations conclude.