Incremental vs Retroactive scans

Cloudlock is always periodically scanning customers' environment, but can also scan the entirety of a customers' environment at once with a Retroactive scan

Cloudlock scans the documents in your environment on a forward moving, incremental basis. When a policy is newly created, documents containing violations will begin raising incidents as they are created, modified, moved, renamed, shared, etc. Cloudlock incremental scans will screen documents that have been created or modified since the last scan against your policies.

The Retroactive Monitor, on the other hand, is a single scan that screens the documents owned by users within your Google Monitoring Scope and screens all documents against the policies you have enabled. RAMs are run when policies have undergone changes or when the monitoring scope has been significantly modified). These scans are manually initiated by Cloudlock by request. When requesting a RAM, please be sure to provide the number of documents in your environment as well as the total number of users within your Monitoring Scope.