DLP Policy By default, the DLP policy scans the messages and files for potentially leaked information, such as credit card number and Social Security Number (SSN).