Proofpoint Endpoint DLP is a data loss prevention solution that protects sensitive organizational data on endpoints. The solution monitors user interactions with sensitive data and focuses on preventing data exfiltration activities such as uploading files to web portals, copying to USB devices, and syncing with cloud storage. It provides content awareness and behavioral monitoring to detect risky data movement from endpoints. The solution uses an endpoint agent and file driver to scan content and read data classification labels to identify and prevent unauthorized movement of sensitive data. Endpoint DLP operates on a cloud-native platform and includes incident management workflows designed for endpoint data loss events. The system provides visibility into data handling activities and generates telemetry that can be analyzed to understand the context of security events and alerts.