NC Protect for NetApp ONTAP is a data security solution that provides dynamic data discovery, classification, and protection for Windows File Shares running on NetApp ONTAP storage systems. The solution operates at the data layer, applying protection controls at the time of access by comparing real-time file content against user and file context to enforce configured security and governance policies. **Data Discovery & Classification** Automatically scans and classifies files containing sensitive data types including PII, PHI, HR records, and intellectual property. Includes pre-defined discovery rules for global privacy regulations, with support for custom policy definitions. **Access Control** Uses attribute-based access control (ABAC) policies that evaluate user and file attributes — such as classification level, geolocation, device, and time of day — to determine access rights dynamically. Access can be restricted to specific individuals or groups independent of broader folder/site permissions. **Encryption** Encrypts sensitive files at rest and in motion when policy conditions are met. Also supports encryption of email content and attachments via Exchange. An optional NC Encrypt module provides key management and BYOK (Bring Your Own Key) support. **Secure Reader** Forces read-only viewing of sensitive documents, preventing download, copy, edit, or print actions. **Dynamic Watermarking** Applies dynamic security watermarks and CUI markings to Office documents (Word, PowerPoint, Excel), PDFs, and image files, incorporating user and file attributes such as username, email, and access timestamp. **File Hiding & Sharing Controls** Dynamically obfuscates files from unauthorized users in folders, chats, and searches. Enforces rules to prevent sharing of sensitive content within or outside ONTAP. **Audit & Reporting** Provides centralized reporting on classified data and user activity. Integrates activity and protection logs with Splunk and Microsoft Sentinel for further analysis.