Atlassian uses cookies to improve your browsing experience, perform analytics and research, and conduct advertising. Accept all cookies to indicate that you agree to our use of cookies on your device.
Atlassian uses cookies to improve your browsing experience, perform analytics and research, and conduct advertising. Accept all cookies to indicate that you agree to our use of cookies on your device. Atlassian cookies and tracking notice, (opens new window)
GEODI Classifier is a set of tools that enables classification of files, emails, and database content. It assigns labels that can be used by DLP systems and other security controls. Beyond DLP, classification enables automated remediation, improves data visibility, supports regulatory compliance, reduces risk, and enhances governance across the organization.
In automatic mode, GEODI determines the class based on content using rule-based and AI-based techniques. This greatly reduces the risk associated with human interaction.
For emails, the classes of attachments are also taken into account.
Manual
Users decide the class, which is naturally prone to errors. GEODI provides various tools to analyze and detect possible errors in manual classification.
In batch
GEODI workflows allow classifying files or database content as part of the remediation process. The scope includes Folders, S3, SharePoint, OneDrive, Google Workspace, Databases, Endpoints and more. Endpoints may run on Windows, macOS, or Linux.
Automatic
In automatic mode, GEODI determines the class based on content using rule-based and AI-based techniques. This greatly reduces the risk associated with human interaction.
For emails, the classes of attachments are also taken into account.
Manual
Users decide the class, which is naturally prone to errors. GEODI provides various tools to analyze and detect possible errors in manual classification.
In batch
GEODI workflows allow classifying files or database content as part of the remediation process. The scope includes Folders, S3, SharePoint, OneDrive, Google Workspace, Databases, Endpoints and more. Endpoints may run on Windows, macOS, or Linux.
GEODI Classifier has many components, add-ons for Desktop and Microsoft Office such as Word, Excel, PowerPoint, and Outlook. A short public training video titled GEODI 121 is available on YouTube to help users get started quickly.
GEODI Server
GEODI Server is the core of the classification process. It manages policies, distributes them, executes automatic classification actions, handles logs, and more.
Classifier Agent
The Agent runs on endpoints and integrates with Microsoft Office and File Explorer on Windows machines. Policy and agent software updates are performed automatically.
OWA add-on
OWA runs on Outlook Web App or Exchange mail servers and classifies outgoing emails.
Workflows
Workflows allow classifying files or database content on on-premises or cloud storages and databases. Endpoints require the GDE Agent to be installed.
Configuration
This page is about configuring central management of the tools. A typical installation and configuration has the following actipns:
The GEODI Server must be installed
Install related country/regulation pack(s) from DECE-STORE
Open default 0000-Classifier project to change the policies, classes etc
Generate batch params for Agent MSI Package and
Sample Agent installation to selected clients
Check the agent monitor panel.
Check the log analysis panel
Modify Class and Policies if necessary
Closing
Deploy Agents to all clients
When the Classifier Module is installed, a ready-to-use project covering 35+ countries and regulations is automatically created. Its name is 0000-Classifier.
You should also install the corresponding Discovery Modules for the relevant countries to enable country-specific configurations.
Start by opening the 0000-Classifier project. On the last page of the Project Wizard, use “Activate Classification Tools” to open the management dialog. All classes, rules, headers, footers, and watermarks are configured here.
Classes → Define your existing class schama, define parallel classes, define visual markers, automated classification rules for each class and more.
Behaviour → Define general rules. How automated classification will work, how to treat mail attachments and more. This page defines the default rule for all, you may then customize rule.
Customize → Same choices in behaviour but with criteria. Select a user grup and set automated classfication mandatory for them. Or select an application (lets say excel) and change header for it.
E-mail signatures contain the sender's PII information. To ignore this, you must either change e-mail server settings or prepare a Template Recognizer.
Template Recognizer is a smart recognizer that matches your signature, the content, and the user list. The user list may come from LDAP for further simplification and sustainability.
You can create a Template Recognizer from the Customizable Recognizer list, or it may already come ready with the Project Template you are using. In either case, it is very easy to complete the settings.
It is possible to define as many Templates as required to cover possible differences in organization or mail signatures of other emails as well.
DLP Issues
If GEODI Classifier is your first classification tool, you can start with the default classes and automatic rules in GEODI and have the system up and running within a few hours. If you already have a DLP, defining the default labels in the DLP will be sufficient. Classification policy updates are automatic, and you can limit which users are affected.
If you already use a DLP and a classification tool, GEODI Classifier easily adapts to your existing rules—there’s no need to change any settings on the DLP side. You simply provide a sample Word document for each class. Defining these classes and labels in GEODI Classifier is straightforward, and the system can be operational within hours.
Some DLPs may cause user complaints on endpoints due to content discovery rules running locally. With GEODI, you won’t need any of those—GEODI performs all discovery and classification tasks automatically without causing any stress on the endpoint.
Agent Deployment and Monitoring
GEODI Classifier uses a single agent, and to simplify deployment, the batch installation file is generated automatically. You can use tools like SCCM or PDQ for mass deployment, or install it manually if you have only a few agents.
To track agent health, version status, and overall performance in real time, use Agent Management PanelPreview
AI Classification
GEODI Q also incorporates AI into Discovery and Classification. You can define your own rules with just a few simple prompts.
The Default Template comes with AI classes that need to be activated with GEODI Q.
Please refer to the GEODI Q setup. Once you set GEODI Q, you will be able to use defaults or new prompts.
Frequently Asked Questions
Yes, with the GEODI Classification Policy Manager, you can create variations based on groups, individuals, IP addresses, and software (Word, Excel, etc.). It can be set to automatic only for one user group, manual only for others, or disabled for a specific user group if needed.
Changes in rules will take effect on clients approximately 10 minutes after modification.
Yes, you can perform bulk classification with Workflows. Many data sources support WF operations (Folder, Endpoint, S3, Google Drive …). You can classify the files in these sources either in place or by creating a copy.
For more details, please refer to the Actions/Workflows pages.
It is the classification of files discovered in GEODI based on query results.
GEODI discovers IBAN, Credit Card, money, document type, date, and the document type. The class secret rule may contain Money>1M TL. GEODI recognizes money in many different forms. This is an example of semantic classification. Similarly, the class classified may contain a rule “if a contract.” GEODI understands whether a document is a contract with AI.
No, GEODI classification tools preserve the file date.
Suppose you have a Classification license for documents coming to the GEODI server through GDE. In that case, you can query and classify documents through GEODI ES, performing the classification on the source machine. The machine where the classification will occur must have our Classifier and GDE solutions installed.
GEODI classifies databases based on the content of each row and writes the classification label to a specific column. Databases can also be masked or anonymized in a similar way, ensuring data protection and compliance while maintaining usability.
Yes, in the GEODI Classification Management Interface, you can optionally exclude emails sent by users within the same domain from the classification.
Yes. You can define multiple languages.
The language is chosen by machine language.
You can use values like usernames in these settings.
You can use ManageEngine, PDQ, SCCM, or a similar tool. The GEODI Classification solution automatically generates the MSI and parameters required for agent deployment. Agents check updates every two days.
If there are few machines, you can manually run the MSI.
Yes, by default, Windows users cannot remove or deactivate Office plugins.
No, the GEODI Classification and GDE (Discovery) agents are designed to impose minimal load on the endpoint/client machines.
Clients will be updated automatically and within approximately 10 minutes.
Yes, offline is possible for add-ons
The add-ons must at least once access to GEODI server to get the policies
Only Manual classification is possible. The automatic classification is not available.
Rules from the last connection are used.
Logs are accumulated and transferred when a connection to the server is established.
Files without label support are classified using the ADS (Alternate Data Stream) method for files other than PDF and Office documents.
ADS(Alternate Data Stream) is an NTFS feature. To list it, use the “dir /r" command.
ADS labels are a feature of the NTFS filesystem and may sometimes not be preserved.
Labels are preserved
Rename the file
Change file extension txt → log - mp4 → avi
Copy the file to another NTFS filesystem with or w/o the GEODI classifier installed.
Labels are not preserved
The file is copied through RDP, Wetransfer, or similar ways.
The file is copied to non-NTFS filesystem
The file is carried in a compressed file (Rar/zip=
The file is attached to an e-mail
Yes, GEODI can adapt to the labeling scheme of an existing classification tool. This allows you to continue using both simultaneously without additional work on the DLP side.
GEODI can classify files and content on the mentioned platforms and more using workflows. There are currently no add-ons available for these platforms.
Yes. As long as the labeling scheme is the same, it doesn't matter which tool was used for the classification. The GEODI classification tool understands the class of a previously classified file and behaves according to policy settings.
Yes. GEODI Classifier is compatible with MIP and other schemas as well.
GEODI stores the metadata needed for classification in %appdata%\Dece\App\Classifier and uses a cache to speed up classification. To ensure your changes take effect and comply with the classification rules, clear the cache.
Yes. You can use various pieces of information — such as the user name, date in different formats, and the software used for classification — both in labels and within headers, footers, or watermarks. The full list is available in the Variables section of the label definitions.
Troubleshooting
The client installation should be verified.
Clients must access to GEODI at least once
The validity of the GEODI token should be checked.
There is no access to the GEODI server, or automatic classification may be disabled in the policy settings.
Automatic classification may take a long time due to network traffic, server load, and file sizes. GEODI reads the file content for auto-classification. Opening with Word or Excel may also take a long time.
In some cases default printer settings may affect classfication for Office Add-Ons
The same method works for header/footer information in Letterheaded Word files.
If GEODI is closed,
If the GEODI port is not open
If add-ons at least once accessed the GEODI server and got the policies:
Only Manual classification is possible. The automatic classification is not available.
Rules from the last connection are used.
Logs are accumulated and transferred when a connection to the server is established.
Under normal circumstances, a classification pop-up opens for each email. To prevent this in bulk emails, you need to add the %AutoClass% expression to the email body or Word document for mail merge. The sent emails will be automatically classified without opening a pop-up.
Alternatively, you can create a separate classification policy for Outlook/OWA.
The classification agents automatically check whether the server has an up-to-date version every two days. Access to documents.decesoftware.com should be provided for this control and automatic update process. If access is available but automatic installation is not occurring, firewall settings should also be checked.
Check “Cash Mode” to true in users “Exchange Account Settings”.
Quick Knowledge Check
Identifies and labels data based on sensitivity and context, enabling security controls, governance, compliance, and automated actions.
Automatic (AI + rules, consistent), Manual (user-driven, flexible but error-prone), Batch (workflow-based, scalable across multiple data sources).
Improves accuracy and consistency, reduces human error, and enables proactive detection of sensitive data.
Uses existing labels and policies, requiring no changes to DLP systems while enhancing their effectiveness.
A repository of predefined regulatory and industry templates (e.g., GDPR, KVKK) that accelerates deployment and standardizes classification.
Centrally configured and automatically distributed based on users, applications, or IP ranges, ensuring consistent enforcement.
Through NLB and distributed architecture, allowing load balancing, high availability, and support for large environments.
Manual classification continues locally; automatic classification and policy updates resume once connection is restored.
Centrally deployed (e.g., SCCM), automatically updated, and monitored via dashboards with minimal maintenance.
Classifies existing data and compares past vs current classification to detect mismatches, hidden risks, and outdated labels.
