[Yandex Cloud documentation](../../index.md) > [Yandex Object Storage](../index.md) > [Concepts](index.md) > Search for sensitive data

# Sensitive data search in Object Storage

{% note info %}

This feature is at the [Preview](../../overview/concepts/launch-stages.md) stage.

{% endnote %}

_Sensitive data search_ is a tool powered by [Data Security Posture Management](../../security-deck/concepts/dspm.md) that helps you detect sensitive information stored in Object Storage [buckets](bucket.md) for timely action to protect it through [access policies](policy.md), anonymization, etc.

You can [create](../operations/buckets/sensitive-data-search.md) bucket scanning tasks and manage scan results via the Object Storage interface in the [management console](https://console.yandex.cloud).

Sensitive data search is subject to the DSPM [pricing policy](../../security-deck/pricing.md#modules-rules).

## Scanning a bucket {#scanning}

Scanning discovers sensitive information within a bucket. To initiate scanning, use a [service account](../../iam/concepts/service-control.md#service-agent).


### Data categories {#data-categories}

When creating a scan, you can specify which data categories to search for. You can target all available categories at once or select specific categories.

Data categories available for scanning:

* `Personal data`: Full names, email addresses, phone numbers, and social security numbers (SNILS).
* `Financial data`: Bank card details.
* `Secrets`: Cloud access keys, passwords, tokens, SSH keys, etc.


## Scan results {#results}

After a scan is complete, the system displays its results available for you to [view](../operations/buckets/sensitive-data-search.md#view), [download](../operations/buckets/sensitive-data-search.md#download), or [export](../operations/buckets/sensitive-data-search.md#export).

If an error occur during scanning, you can view diagnostic messages describing the issue under **Messages and errors**. For more information about errors, see [Object Storage quotas and limits](limits.md).


## Centralized Data Security Posture Management {#centralized-control}

The Object Storage UI supports sensitive data search in individual buckets. To monitor data in multiple buckets at the folder, cloud, or organization level, use the [DSPM](../../security-deck/concepts/dspm.md) module inside [Yandex Security Deck](../../security-deck/index.md). With DSPM, you can aggregate multiple buckets, folders, and clouds into a single [data source](../../security-deck/operations/dspm/create-data-source.md) and set up scheduled scans.


#### Useful links {#see-also}

* [Searching for sensitive data in a bucket](../operations/buckets/sensitive-data-search.md)
* [Data Security Posture Management (DSPM)](../../security-deck/concepts/dspm.md)
* [Preparing data for scanning in DSPM](../../security-deck/operations/dspm/create-data-source.md)