Abstract: A method for incremental scanning of documents may include identifying documents to be scanned for sensitive information according to at least one data loss prevention (DLP) policy, the documents being associated with a bit array. The method may further include generating a key of a documents and applying, for each document, a set of functions to the key of the document, where outputs of the functions map the key to positions in the bit array. The method further includes identifying a subset of the positions in the bit array that correspond to the outputs of the functions in the set of functions, the subset of the positions to indicate whether the document has been scanned.

Abstract: A method for incremental scanning of documents may include identifying documents to be scanned for sensitive information according to at least one data loss prevention (DLP) policy, the documents being associated with a bit array. The method may further include applying, for each document, a set of functions to a key of the document, identifying positions in the bit array that correspond to outputs of these functions, refraining from scanning the document when values of all of the identified positions in the array indicate that the document has already been scanned, and scanning the document when a value of at least one of the identified positions in the array indicates that the document has not yet been scanned.