Abstract: A data classification system includes a proxy and a processor. The proxy is configured to intercept transactions that are conducted over a network between clients and a data store. The processor is configured to construct, based on the intercepted transactions, a classification map including a classification of at least some of the data that is stored in the data store into predefined classes.