At Matters.AI, our mission is to serve as the AI Security Engineer for Data. We help security and privacy teams automatically discover where sensitive data resides, monitor who interacts with it, and neutralize risks before they lead to a breach.
In September we gave teams granular control over scan execution, unified our policy engine, and launched DSR Scan for privacy engineering. October widens what Matters can see by bringing more file formats under classification, adding AWS NoSQL datastores to the sensitive data inventory, and surfacing misconfiguration exposures across on premises and cloud environments.
Here is a breakdown of everything we shipped in October 2026.
1. Expanded file type support
Local database files, contact exports, database dumps, and markdown documentation often hold sensitive data, yet they used to fall outside classification scope and show up as unclassified.
What is new?
Discovery and classification now support additional file formats, extending coverage to local and embedded databases, bulk contact exports, database backups, and engineering documentation.
| Extension | Format class | UI group |
| .db, .sqlite, .sqlite3, .mdb | Structured | Databases |
| .vcf, .vcard | Unstructured | Contact File |
| .heic | Unstructured | Images |
| .sql | Unstructured | Code |
| .dump | Unstructured | Log |
| .md, .markdown | Unstructured | Documents |
Key capabilities and coverage
- Database files as structured sources SQLite and Access databases are now classified as structured sources so you can surface sensitive data stored in local or embedded databases.
- New Contact File group Dot vcf and dot vcard exports get their own UI group because these files commonly carry names, phone numbers, and email addresses in bulk.
- Extended existing groups Dot sql now sits under Code, dot dump sits under Log, dot md and dot markdown sit under Documents, and dot heic sits under Images.
Outcome: Fewer files fall outside classification scope, giving teams full visibility into sensitive data held in database backups, engineering notes, and exported contact lists.
2. DSPM coverage for Amazon DynamoDB and Amazon DocumentDB
NoSQL datastores carry a growing share of customer and application data on AWS, and security teams need them in the exact same inventory as everything else they protect.
What is new?
Data Security Intelligence now supports DSPM discovery and classification for Amazon DynamoDB and Amazon DocumentDB, bringing AWS NoSQL datastores into the same sensitive data inventory as relational and object storage sources.
Key capabilities and coverage
- DynamoDB discovery and classification DynamoDB tables are automatically discovered and classified for sensitive data elements.
- DocumentDB collection scanning DocumentDB collections are scanned using the same classification logic applied across cloud and SaaS sources.
- One sensitive data inventory NoSQL findings appear alongside relational databases and object storage, which means teams can work from a single unified view without stitching separate dashboards together.
Outcome AWS NoSQL datastores stop being a separate blind spot and become part of the central inventory teams already rely on to prioritize risk.
3. Misconfiguration exposures across on premises and cloud
Security posture issues often leave sensitive data exposed, yet teams frequently have to inspect infrastructure settings in separate tools from their data inventory.
What is new?
Matters now brings misconfiguration exposures across on premises and cloud environments directly into the platform, allowing teams to inspect the settings that put sensitive data at risk alongside the data itself in one console.
Key capabilities and coverage
- Unified hybrid visibility Posture findings from both on premises infrastructure and cloud environments are surfaced together inside Matters.
- Data-aware risk context Teams can view risky configuration settings directly alongside the sensitive data stores they impact.
- Centralized triage Security engineers no longer need to cross-reference separate infrastructure scanners and data classification tools to prioritize remediation.
Outcome Teams gain a clear, single-console view of both where sensitive data lives and which misconfigurations put it at risk.
October updates at a glance
- Expanded file types SQLite and Access databases classified as structured sources, a new Contact File group, and extended Code, Log, Documents, and Images groups.
- DynamoDB and DocumentDB DSPM discovery and classification for AWS NoSQL datastores within one sensitive data inventory.
- Misconfiguration exposures Posture risks across on premises and cloud environments surfaced directly alongside sensitive data in one console.
All of these capabilities are live in your Matters.AI console today. Log in, connect your DynamoDB and DocumentDB datastores, and see what your newly classified files have been holding.




