Neutral

I have used BigID to scan for data discovery, data protection, analyze where the data is found, data classification, and data mapping. I integrated BigID with Microsoft Purview to expand the scope of Purview, especially for scanning Google Cloud Platform (GCP) and Google Drives in a multi-cloud environment.

BigID has allowed for expanded data discovery and classification, particularly in multi-cloud environments. This integration helped automate the business processes when used in combination with Microsoft Purview.

BigID is more advanced than Microsoft Purview when it comes to machine learning and AI development tools. It is capable of scanning documents in Google Drive, Microsoft Azure, and other platforms. It has better visibility of data mapping, including data lineage and the lifecycle of the data, due to its ability to scan more data sources than Purview.

BigID needs improvement in terms of automation. Its automation capabilities are limited compared to Purview. While BigID can generate outcomes, it is not adept at automating business processes, which is why we often need to export APIs into Purview and use Microsoft's Power Automate tools.

I have used BigID in the last 18 months.

BigID has had a positive impact on my approach to data security and risk management. Overall, it is very stable, and I would rate it an eight out of ten.

I have used BigID in a very large global setting with approximately 18,000 employees. While I haven't tested it in smaller environments, I would rate its scalability as a six out of ten.

The technical support from BigID is very good; I would rate it a ten out of ten.

Positive

The setup of BigID is very easy. It is a cloud-based solution and is very intuitive. You can integrate and install it easily, and it is not resource-consuming.

I'd rate the solution eight out of ten.

BigId is a Data Security Posture Management and Data Loss Prevention solution that scans data systems across the enterprise for passwords, secrets, and PII information. 

It offers significant benefits in data discovery, privacy, and security. 

We primarily use it to scan structured and unstructured data across our cloud systems, which consist of 100K+ storage buckets. It is a comprehensive data intelligence platform that helps organizations discover, classify, and manage their data effectively while ensuring data privacy, compliance, and governance.

It helped our organization to find and protect where sensitive data and data discovery, privacy, security, and governance, making it a valuable tool for businesses dealing with large volumes of sensitive information across different data systems.

Before using BigID, maintaining an accurate inventory of data stored in our AWS S3 buckets was challenging due to the data's sheer volume and distributed nature. 

BigID’s advanced scanning capabilities have provided a comprehensive view of all our data assets across S3 buckets, identifying structured and unstructured data. This has given us a clear understanding of our data landscape, enabling better management and utilization of data.

BigID is excellent at discovering and classifying both structured and unstructured data across an organization. This is crucial for identifying sensitive data and ensuring compliance with various regulations. 

It provides a unified view across different databases and supports a wide range of data source types, including cloud and on-premises systems. It offers compliance with various regulations and has a unified view across different databases.

It will support a large amount of data source types which include cloud and on-prem systems.

The solution needs to improve:

Scan Reliability. Enhancing the functionality and speed of the remote scanner setup is imperative. 

User Interface Navigation: The dashboards and findings landscape require significant improvement. 

API Flexibility: It is crucial to make enhancements in data export operations.

Navigation and Usability: Some users find catalog navigation challenging due to the lack of a search-by-column feature, making locating specific data difficult.

Export Functionality: The export feature tends to be buggy, particularly when dealing with large data sets, leading to delays and necessitating manual intervention

FalsePositives: The process has to find a new way to validate the regex match pattern by validating with some external source 

I've used the solution for over a year.

I like BigID's in-depth discovery and scanning capabilities, especially for unstructured data. This feature is a standout compared to competitors. 
The tool's data classification capabilities are impressive. It offers custom classifiers and a blend of regular exploration and artificial intelligence, making it a next-generation solution. This enhances data security, and its security posture management is straightforward and user-friendly.

Organizations lack a holistic view of their data. They have structured, unstructured, semi-structured, and cloud data spread across various sources. Over the past five to ten years, companies have amassed a significant amount of data, with around twenty to thirty percent being unnecessary. This leads to storage wastage, compliance issues, audit findings, and vulnerability gaps. BigID is the tool that helps identify and provide a holistic view of the data, enabling organizations to take proper control.

Improvement could be made in data consent management and data privacy impact assessment.

I have been using the product for three to four months. 

I rate the tool's stability a nine out of ten. 

I rate the tool's scalability a nine out of ten. In my organization, we're not using BigID ourselves; we're partnering with them for distribution and other related aspects. In a particular organization, the user count for BigID might range from 100 to 500.

I haven't needed to evaluate or contact technical support for BigID yet. Since it's new to the Indian market, we haven't acquired any customers who require technical support.

The initial setup is easy, especially since it's a SaaS platform. BigID handles all the infrastructure-related tasks, making it hassle-free. We deploy a virtual appliance or container in our data center. Additionally, the convenience of choosing between SaaS or on-premises platforms is beneficial, as BigID offers both solutions.

As the trend leans towards cloud migration, BigID plays a significant role in facilitating data migration. Whether it's on-premises or in the cloud, BigID provides essential support. It has connectors and APIs for various cloud platforms, aiding organizations in managing data already on the cloud or those in the migration process.

The tool offers good ROI. A comprehensive view of data is crucial, especially for countries with strict data privacy regulations. Non-compliance could lead to heavy fines or penalties. BigID can help avoid such consequences

The solution is not licensed per user but rather based on capacity. For instance, organizations with large amounts of data, such as 50 GB or more, are the ones that typically qualify for BigID.

The tool's pricing is premium so that it could be categorized as expensive. However, its price tag justifies the proficiency of its scanning engine and tools. It's considered a premium tool with a higher price point.

I would recommend BigID to organizations, especially those heavily focused on data policy and customer-facing businesses, particularly in the B2C sector. It's crucial for such organizations as they handle and safeguard customer data. Consent is paramount, and a tool like BigID is essential for managing data subject access requests, discovering data, and ensuring compliance. The classifiers provided by BigID are particularly effective in this regard.

I rate the overall solution an eight out of ten. 

I work in an area focused on data protection. Currently, in my practice, more than five to six projects use BigID.

In the client's data source, there may be sensitive information. Each country has its own data protection laws and encryption standards. We scanned every database using BigID, both structured and unstructured. 

After scanning, we could properly categorize the data and identify sensitive information. BigID has built-in functions that show where the data is. We sent this information to the client with suggestions for suitable encryption standards for their specific data, whether it's plain text or encrypted.

My organization had a joint venture with BigID, which is the main reason we chose it. Another reason is the support from the BigID team. BigID has frequent updates compared to other products and provides a dedicated support team for developers. 

We can integrate any new product via API connection into ticketing, even if the product is not well-known or brand new. We can also easily update to the latest version or choose an older version if needed. 

These updates can be done independently, without relying on a standard technician or developer. BigID is flexible, so we can upgrade our services as needed, allowing consultants to manage the tasks.

Data discovery capabilities:

BigID offers different scan types for data discovery. The most powerful one is the full scan, which scans both data and metadata. However, the metadata scan is faster in comparison. 

For instance, if a scan is estimated to take three or four days, and it lags behind on the second day, we can skip that module and resume with other modules without disrupting the ongoing scan.

Even if the scan is 90% complete, we can export the data and begin our process. The e-discovery feature has been very useful for us.

The main use cases involve APM integrations, allowing us to accommodate queries with the necessary tools seamlessly. 

Another advantage is the ability to process millions of data points quickly using various scan types like full scan and metadata scan, which are adaptable to our specific needs. These scan types are highly beneficial and offer more flexibility compared to similar products with standard scan options. 

Additionally, BigID's Redex operations enable us to create new rules and run scans across different data sources, tailored to our specific use cases. In our case, we primarily utilize it to scan client data sources.

Features that helped to enhance the data governance aspect:

• I like the predefined sensitive information labels in BigID. They are not generic; for example, for PHI information, they specify exactly what PHI terms to scan for. 
• Additionally, BigID offers data protection loss-wise options, and we can add our own labels using InfoMetrics as needed. 
• The BigID support team is also crucial. They have weekly sync-up calls to help us resolve any issues we encounter with the product promptly. This level of support is very important. 

These security labels, in particular, are a significant reason why many organizations, including ours, prefer BigID. The security labels are indeed very useful.

The interface has been updated and looks good. Earlier, it was bit outdated. 

One concern I have with BigID is regarding certain scans, like the multi-scan. The issue is that we can stop and retrieve these scans, but once they start, they go through an enumeration process. This process doesn't show an exact timeline, so we can't estimate its duration. In previous versions, I believe there was an estimated time for this process, but the new update seems to have removed it.

The other concern is the price. The comprehensive support and features come at a premium cost. Additionally, deployment and access for all users could be improved. Currently, it seems to be centralized, and perhaps it could be deployed for individual devices as well.

I worked on a six-month project with BigID. It's a dedicated tool for scanning structured and unstructured data.

I've switched projects recently, but I used BigID until a month and a half ago. However, I still have some BigID certifications and frequently use it for API integration and other tasks.

I had no issues with the stability. The reason being BigID provides comprehensive onboarding, including learning resources, URLs, and virtual training, allowing us to gain hands-on experience in a replica environment before using the production version. 

There is also a BigID certification program to ensure proficiency. We utilize this training environment for testing and experimentation before applying it in production. This approach is efficient and helps familiarize users with the product. BigID is user-friendly and easy to use, not complicated.

While we use the product, once the data nodes are all completed, we need to export the data and use Power BI, Tableau, or Looker Studio to visualize it. The data is not readily available in a presentable format, which is time-consuming and a limitation.

It won't be in Excel or a similar format; it will be available for presentation to clients. We need to explore the data and do a few things. That's because it's time-consuming and a limitation of BigID. 

But in a recent update, BigID integrated with Looker Studio. At the time of data conversion and application, it wasn't responding well. I think we can now handle it inside BigID itself. Anyway, that was an issue, but right now, it's fine.  

We have console support from the team. If we are unable to implement something within the product, we can ask them, and they will add the feature. So, I don't feel any limitations in what we are currently doing, such as e-discovery processes for structured and unstructured data. 

BigID supports all data types, complies with various laws and standards that enables sensitive information, and allows customization, including creating our own labels. I don't feel any kind of limitations. 

BigID's customer service support have two levels of support. Initially, the developer assigned to our cloud instance provides technical assistance. If they cannot resolve the issue at the UI level, they involve a second-layer developer. 

However, with a higher subscription, we only receive developer support for a limited time, like two or three months. After that, additional support requires an extra charge. Despite this, the support has been good so far, and they always find a solution for our issues.

Positive

Most organizations use Microsoft Purview, and many of our clients have licenses for it. Being a Microsoft product, it has advantages. 

With BigID, we need to pull data from sources and integrate it before scanning. If it's a Microsoft product and the data amount is small, we can replace it. Microsoft Purview can automatically identify data without the need for extensive scans.

Since it is a cloud-based product, they have a separate server assigned for deployment. They provide virtual machines based on our recommendations, and their technical team handles everything. 

We don't need to do anything technical; we just use the URL they provide, along with our credentials in Autologics, to access and use the scans. It's a very simple process.

Timeframe to set up this product: 

The deployment itself took about three to four hours minimum. The total time depends on the number of data tools linked and the amount of data. I wasn't part of the initial deployment, but in my experience, it can take around three to six hours.

Maintenance:

The maintenance provided by the BigID team. They offer two different packages. We opted for the higher-priced option, which includes software services, automatic upgrades, and fixes. 

With the lower-priced option, manual updates with scripts are required. However, I recently heard that they now provide everything through their executive team, which is a good upgrade.

We use BigID for our reviews, and our organization has a joint venture with them. We use other tools as well, such as Microsoft Purview, alongside BigID. However, BigID performs better due to its superior API integration capabilities.

It is used in an MNC. But, based on my research, it is competitively priced compared to market standards. It is worth the money.

Compared to other products, more people are familiar with BigID. BigID was not as familiar to some people working with technologies because it was used by a closed group. The BigID support team is doing their best, and that's my personal experience. However, BigID wasn't that familiar to some people because it deals with specific areas like skill, regulation, automation, and governance. They need to do more to educate people about data.

One issue we experienced was with the scripts being in YAML format, which some people didn't understand. It would also be helpful if they could address issues related to entity and space sensitivity in the cloud. We've encountered errors when exceeding storage limits, and we haven't found a solution yet.

Overall, I would recommend BigID. If they are dealing with a large amount of data, if they need to scan all data sources, regardless of format, then BigID would be a suitable product for them.

Overall, I would rate the product an eight out of ten. 

I use the solution to discover sensitive data. I use it when the company I am part of is unable to provide locations of specific data. The goal of the tool is to find data and help companies make a better decision in regards to privacy laws. 

The PII feature of BigID has helped our organization. One of the challenges BigID can help companies with is gaining control of where the data leads and to control the data lifecycle. 

One of the most valuable features is the first step to finding PII, whether sensitive data, financial data, or personal information. Another important feature of the tool is the desired data subjected to request. Once you know where the data is present, you can receive a request from the data subject. A person can also receive internal automation using the tool and perform a desired request with the total PII. 

The tool should have more classifiers or classifications about different states. For example, there should be specific classifiers for Brazil and other specifics for China. The existing features should be improved, and more features should be added to the tool. 

I have been using the solution for five years. 

I would rate the stability a seven out of ten. While using BigID, sometimes the user doesn't have visibility into the scan or when it will be completed.  

I would rate the scalability an eight out of ten. 

The tech support is good but sometimes the support team delays to provide a solution. I would rate the tech support an eight out of ten. 

Positive

The initial setup complexity of BigID depends upon the project goal. If the goal is to scan multiple databases or large databases, the initial setup can be difficult because it's necessary to set up more than one scan separately.

The tool can be set up for an on-premise scan or a cloud scan, and it's vital for the scan to take place near the data source to speed up the process. The deployment type of the solution depends on the kind of database an organization already holds and the strategy or company goal. 

The solution provides a good return on investment because it helps companies to be compliant with privacy laws and manage data as well. The product helps identify types of internal data like in HR processing systems and financial systems. 

The product is expensive, but so are all competitor data discovery tools. 

Data classification is an important aspect of the tool because, by using it, a company can make better decisions and implement the right security process. The data classification offered by the tool can help companies improve their security strategy. The solution also helps in the data minimization process. For instance, if the tool duplicates data in different databases, companies can use BigID to reduce the number of duplicate data. BigID thus can also be used to meet compliance with GDPR, CCPA and LGPD.

I would recommend BigID to others. The solution is simple to manage, and most use cases are easier to deploy with It. I would rate the solution an eight out of ten. 

My company works with BigID since it serves as a data governance and security management tool. My company currently has a customer for BigID in the pipeline for whom we configured the product's PoC phase recently, so we are planning to close the deal in the first quarter of the upcoming year. While selling BigID to our customers, my company discovered that the product does not solve the problems of its users. The product is meant to help users with the areas related to data and data splits, and users may expect it to cover areas like data masking, data encryption, and DLP. BigID gives users visibility over where a particular data resides in their environment, like whether it is stored in the cloud, on-premises, Google Drive, or whatever other locations are there, after which the product gives its users control of the data. With BigID, users can decide what to do with their data and check whether a particular piece of data has duplicates in several places within their environment, after which users can leave just a copy of such data. In general, BigID gives the user complete control over where a particular data resides. BigID is also involved in the area of compliance. When discussing GDPR, especially EU GDPR, the product helps users remain compliant with the required type of laws since BigID understands the need to do so for the financial sector, especially for the ones that issue ATM cards, where the solution can offer help and cover. BigID does not take care of the security aspects, because of which it does not take care of areas like encryption, data masking, and DLP. What BigID can do for its users is integrate with all the solutions of its users that take care of all the security functions. BigID can help its users by offering its seamless integration capabilities with other security solutions. Considering the aforementioned details, my company has started to provide some sort of a bundled offer to our customers. When we speak with our company's customers about BigID, we also speak to them about Nutanix, which can help handle the security aspect.

BigID's scanning feature is its most valuable component. The scanning feature of the product is used maybe at least every week. BigID doesn't have the ability to store data on a flash drive. The product should also include the attributes to cover or scan flash drives, external drives, and all such areas. It doesn't matter where the data is stored to BigID, as it is going to scan the data and files and show them to the users, after which they can decide what to do with the data. I think that an important feature of BigID is its ability to deal with structured and unstructured data. BigID has the ability to identify which data is personal and has identifiable information. Users of BigID need not worry too much when it provides them with false positives or when some of the scanned data is not accurate. BigID itself is intelligent enough to say that the data it scanned does not contain any sensitive information, so there is no need to worry about anything. BigID also figures out the data that has been duplicated elsewhere, after which it gives users a choice on whether to keep it or delete it. BigID also points out the data that is in somebody's email, after which it asks what its user wants to do with the data. With Big ID, a user can also do something around DLP. BigID asks its users if they want to prevent people from spilling their company's information by copying such information to a flash drive or if they want to get information if somebody has tried copying and pasting the company's information. The aforementioned areas are very important to consider when it comes to trying to achieve organizational security goals or to help with whatever strategy a company follows. The tool helps protect data, making it a product that provides value to the organization.

It would be great if improvements can be made to the product. Based on one of the meetings that I have had with those who work for BigID, I feel that they don't intend for BigID to focus on the area of security. We would not get good feedback from BigID if our company suggested BigID's personnel focus more on the area of security as it does not fall under the main part of the product's offering.

When I talk to the prospects, I should be able to tell them that they need not worry in terms of security, especially data security, since such issues can be resolved by buying just one solution, which is BigID. I should be able to tell prospective customers that apart from scanning and compliance, the product also offers data security. The tool currently lacks security features. If the tool can include security features in its offering, it can be fantastic.

I have experience with BigID.

BigID's technical support team is very responsive and even responds to emails on time, making them very prompt. Even for meetings, BigID's technical support team arrives on time. BigID's technical support team has answers to every concern and question. You know? BigID's technical support team always tries to make sure that customers are happy. In terms of support, I think BigID does a very decent job. I rate the technical support an eight out of ten.

Positive

Nutanix is one of the other solutions my company plans to work with for data security in the future.

My company has only dealt with the PoC phase of the product for our customers, so we haven't onboarded the solution for any of our customers. I don't have an idea of how the setup phase works since my company stopped with the PoC phase carried out for the clients to show them how the product works and the value they can expect if they decide to onboard the solution in their environment.

From my perspective, during the product's PoC process for our customers, I realized that there were around 12 to 15 use cases that we couldn't achieve or do with BigID, so there was a need to bring in a third-party help or expert, making it a stressful process. If we get to work more with the technical team and become more grounded when it comes to solutions that fall under the same category that users may need to integrate during the deployment stage, I think it would be fantastic. With SharePoint, a user can deal with a lot of standard use cases, and it can be really helpful if one can become an expert with SharePoint. The entire process and functions of the product did not offer a smooth experience for the customer.

BigID has its own AWS account, so if users decide to deploy the solution on the cloud, then they need not worry about the cloud plan. BigID works better on the cloud for me.

I think that BigID's pricing is very reasonable. Maybe when my company can see the product with more leads, I will be able to comment on whether the product's price is too high or too low. As of now, I think that the product's price is okay.

In 2024, BigID will be one of the key solutions my company works with, considering the new data privacy law passed in Nigeria. BigID will be one of the strategic products my company will work with soon.

I don't have an idea of what the maintenance of the solution looks like. When I asked BigID whether there would be downtime or some issues in the product each time during an update, I was told that the updates could be done outside working hours so that no one would experience any downtime. With BigID, users can decide if they want to run the update on the product or not. During critical time periods, like holidays or festive seasons, if there is a lot of mobile and internet banking traffic, the update can be pushed to a later date. Users can also decide on a date on which they want to update the product. BigID makes it compulsory for its customers to ensure that they have at least done the last two recent updates released. In short, if BigID releases a new update and you have not updated to the previous release of the product, then you need to choose the update that you want, making the update feature very flexible for users. With Big ID, you can decide to run the update you want or schedule the update for a later date, and it won't cost you any downtime.

It might not be very important for a lot of banks to look into solutions like BigID. I don't think there has been enough investment to create awareness about the product in the Nigerian market. When my company engages with a new bank, we need to provide them with data sheets, first-hand reports, and other such reports to convince the banks that BigID is a useful solution. BigID needs to invest in branding and also create more awareness in the website market.

In Nigeria, for those who plan to implement BigID in the company, I would say that BigID is a very good solution since the value and its offerings are unique. Most people feel that with the help of a standard solution, they can stay secure and don't think about the compliance aspect, which involves having you put in the data, manage it, and what you do with it. People also don't worry about the regulatory aspects, like GDPR and the PRA, as they feel that with a simple solution, they can protect the data or use it for data masking. It is important to give people an insight as to where their data resides. When you ask people where the data resides in their environment, some may say that it is stored either in the servers or on an on-premises model. When my company conducted a scanning with BigID, we found out that some people have stored their data with the help of flash drives and that it contains some sensitive data, while some have stored data in an Excel document on their computer, meaning BigID has the ability to provide visibility to its users over where data is stored. Without proper visibility, users won't be able to protect the data properly, which is why I feel that the value BigID provides to its users is unique. Those who are willing to onboard the solution need to consider the fact that the security of data is equally important since, in Nigeria, certain organizations have started getting fined, which comes up to around fifty percent of their gross revenue, if there is a data breach and if the organization had not taken care of every possible procedure in terms of securing your data. For organizations in Nigeria, it is actually very important to get BigID because, you know, it is really good to meet the compliance and regulatory requirements.

I rate the product a nine out of ten.

I'm an implementing consulting partner for BigID. Initially, the clients used the solution for compliance with GDPR and CCPA. However, more recently, the software has evolved significantly to be useful for data governance and areas such as security posture and related aspects.

One of the most valuable things in a data-focused world is a tool, a technology that's data-centric, not trying to master data management or whatever else. 

It's a source of truth for what data an organization holds, giving it the ability to catalog, categorize, and understand its data in a way that other technologies like Alation, Collibra, or Informatica didn't afford. So, that's probably the biggest value in the data center.

BigID is making some forays into the GRC space, and that's a natural progression. I'd like to see that improve so that data governance is better, data risk is identified, and the ability to control and mitigate it. So, that's where I see the opportunity for advancement.

I have been using this solution for five and a half years.

BigID is stable. I've positioned it as the market leader in privacy data technologies for some time. In comparison to other technologies I've used, it's far superior.

The product is scalable. For one of my customers, there are not more than half a dozen. It's not a broad adoption tool. It's more like a utility. So, fewer users but many beneficiaries.  

The initial setup is complex. There's a nuance to it, and that's one of the things that's been interesting as the technologies evolve. It's not complex in and of itself. You can install it quickly and attach data quickly. 

The complexity arises because most organizations I've worked with are thinking about their data for the first time. So, while installing the software and operationalizing it is easy, the onboarding and understanding of the data, design, legacy systems, and everything from Oracle to side-based to MS Access, that's where it gets tricky. They need to catalog, correlate, combine, rationalize, and really think through it all. 

So, the software itself is easy to implement and operate. But the operational side, from the client's perspective, requires a commitment. It's like buying a circular saw and expecting to build a house. The tool will take you some of the way, but if you don't have the underlying knowledge, you're going to struggle.

The deployment model is a client-driven decision. I've been the implementation consulting partner. Ultimately, the client makes the decision on the deployment model. When BigID first came out, it was originally only available on-premises. Later, clients could choose to deploy it on the cloud, whether on AWS, Azure, or another platform.

BigID does maintenance releases periodically, requiring updates. Major releases are probably monthly to quarterly. Maybe four times a year now, or two, they just changed the cycle. Then, there are minor releases occasionally. These need to be done, but underlying maintenance isn't bad. It is like applying periodic updates to any other software package.

It is an expensive product. There are different price points for different BigID functions and features now. So, it depends on your specific needs.

In the time I've been working with BigID (over half a decade now), it's gone from a monolithic software package to something with more modular parts. Now, the customer or client can buy only the required pieces, making it not terribly expensive.

So, the pricing depends. If you have thousands of data sources to connect and manage, and you struggled with an MDM package in the past, you'll find BigID valuable and even cheap. But if you're a small business, it's probably not the right tool for you.

So, it depends on your goals, past experiences, business problems, and organizational direction. If you're in healthcare, technology, or manufacturing with tons of data sources to control, understand, and manage (data disposition, cataloging, reporting, GDPR/California compliance, etc.), and you have the right discipline and understanding of what you're trying to do, you'll find it inexpensive. 

But without management commitment to using the tool effectively, it's like buying an expensive Oracle or SAP system and not getting the desired results.

My first question is: what are you trying to achieve? What business problem are you trying to solve?  It's like asking if you should buy a calculator or Excel for basic math. A cheap calculator even does simple calculations! So, what's your goal?

If your answer is data inventory and starting your data governance journey, then BigID is absolutely worth exploring.

Overall, I would rate the solution a solid nine out of ten. Compared to the market, it's a ten. There are a few things I'd like it to do better, but they're working on it. So, nine now, with room to grow on.