Make a handling policy visible
A team maps its Public, Internal and Confidential labels into Office. Quick Select makes common markings accessible while configured checks support the policy.
Explore Office classification →Practical applications
Data classification for ISO 27001 and GDPR workflows.
These illustrative workflows show where classification and protected document exchange fit. They are examples, not customer case studies.
Exchange a protected project brief
Colleagues verify partner certificates through a trusted channel, then export a saved document using Certificate mode in a licensed v7.0 build.
Explore certificate exchange →Retain classification context
Information managers map local labels to structured iCLASS fields and configure their gateways to interpret the organisation’s release codes.
Explore iCLASS →Supporting ISO/IEC 27001 information handling
ISO/IEC 27001 describes requirements for an information security management system built around the organisation’s risks. ClassifyIt can help put your chosen information classification and labelling policy into everyday Office work.
- Define your policy. Decide which information needs protection, who owns it, and what your classification levels and handling rules mean.
- Configure the labels. Map your approved vocabulary and release information into the ClassifyIt policy used in classic Outlook, Word, Excel and PowerPoint.
- Apply and review. Use visible markings and structured metadata to communicate sensitivity. Test representative documents, email workflows and policy settings before rollout.
- Maintain the process. Train users, review the policy and evaluate the wider controls through your information security management system.
Classification and labelling support a broader management process. Using ClassifyIt does not confer ISO/IEC 27001 certification.
Read the administration guide · ISO’s overview of ISO/IEC 27001 ↗
Supporting GDPR security-of-processing workflows
Article 32 of the EU GDPR calls for technical and organisational security measures appropriate to the risk. Classification can help staff recognise sensitive information and apply the organisation’s handling policy to emails and documents containing personal data.
GDPR does not prescribe a universal document-labelling scheme. Sensitivity-based classification and labelling can form part of your organisation’s chosen security measures.
Make handling expectations visible
For example, a bank or business team can use its approved confidential marking for an Office document containing customer information. Staff still need to check recipients, permitted use and the applicable sharing process.
Evaluate protected exchange
Where your risk assessment calls for encryption, assess the licensed CryptIt document and attachment workflow with representative recipients. Classification markings alone do not encrypt content; the public v7.0 shareware only simulates encryption and does not encrypt content. A licence is required for operational use and real .tdf encryption.
These are illustrative security workflows. ClassifyIt does not identify all personal data automatically or establish a lawful basis, retention policy or GDPR compliance. Your organisation must assess and operate the full set of applicable measures.
Explore Outlook email classification · Explore CryptIt · Read the EU GDPR, including Article 32 ↗
Support your information security controls
Classification gives people and configured systems useful handling information. Effective controls also depend on policy, training, access management and testing. ClassifyIt does not automatically establish regulatory compliance or certification.
Bring your policy into Office
See what fits your team.
Discuss your markings, your Office environment and a practical evaluation.