01
Data you forgot you had
A support ticket with a password in the body. An export sitting in an analytics warehouse. Sensitive fields turn up in places nobody put them deliberately.
STATUS · IN STEALTH
REGION · MENA
Trust begins with knowing your data.
Gravitas Trust House builds data governance infrastructure for enterprises that need to know where their sensitive data lives, who can reach it, and whether they can prove it. Trust isn't claimed — it's evidenced.
SCHEMA · INTROSPECTED
CLASSIFIED PII · HIGH
VALUES STORED: NONE
The problem
Most organizations can't answer the first question an auditor asks.
Not because they're careless — because the answer is spread across a dozen systems nobody has looked at together. Sensitive data accumulates in places it was never meant to live, access is granted faster than it's revoked, and the evidence needed to prove any of it doesn't exist until someone asks for it.
02
Access that outlives its reason
Contractors who finished. Staff who moved teams. Admin rights granted for one migration and never taken back.
03
Evidence assembled under pressure
Readiness work starts when the audit is booked, so answers get reconstructed from memory rather than recorded as they happened.
What we do
Find it, classify it, prove it.
Gravitas connects to the systems you already run, discovers what sensitive data is in them, and keeps a record of the decisions you make about it — so readiness is a state you're in, not a project you start.
Discovery
Connect a database read-only. Gravitas introspects the schema, samples values in memory to classify them, and records the metadata — never the values themselves.
Classification
Every field is categorised — PII, Financial, Credentials, Health, Behavioral — and given a sensitivity level, with the reasoning attached.
Access review
Grants are assessed against which systems actually hold sensitive data. Each review is preserved as evidence: who decided what, and when.
Readiness
An assessment against your framework — SOC 2, HIPAA, GDPR, or PCI-DSS — scaled to what's reasonable for a company your size.
Get in touch
We're working with a small number of design partners.
If you're preparing for an audit — or you simply don't have a confident answer to where your sensitive data lives — we'd like to hear from you.
No spam. One email, when there's something to see.