B

Bedrock Data

AI-driven data security platform for cloud

Overview

Bedrock Data provides a data security platform for protecting enterprise data in cloud and AI environments. Its AI Reasoning Engine automatically discovers, classifies, and manages sensitive data to prevent leakage into AI models, with continuous data discovery and risk assessment. The platform is API-native and serverless, integrating with AWS, Azure, and GCP without agents or proxies, enabling quick deployment and lower costs. By offering continuous DDR, data perimeters, and automated remediation across IaaS, PaaS, and SaaS, Bedrock Data aims to help organizations securely govern data and safely use it with generative AI.

Work here?Claim your company

About Bedrock Data

Simplify's Rating
Why Bedrock Data is rated
B-
Rated B on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Data & AnalyticsEnterprise SoftwareCybersecurityAI & Machine Learning

Company Size

51-200

Company Stage

Series A

Total Funding

$35M

Headquarters

Menlo Park, CA

Founded

2022

Get referred to Bedrock Data

See people who can refer or advise you

Simplify Jobs

Simplify's take

What believers are saying

  • On November 10, 2026, Bedrock Data expanded OpenShell coverage as CNCF adoption grew.
  • Agent DLP launched September 28, 2026, giving customers immediate runtime enforcement.
  • Greylock's November 2025 Series A and Snowflake Ventures validate enterprise demand and funding runway.

What critics are saying

  • NVIDIA and CNCF could commoditize OpenShell controls, shrinking Bedrock Data's differentiation by 2027.
  • If metadata is stale, Agent DLP blocks good workflows and misses toxic data paths.
  • A Snowflake or AWS governance feature launch would crush Bedrock Data's standalone wedge.

What makes Bedrock Data unique

  • Bedrock Data fuses Metadata Lake context with runtime enforcement across AI agents and clouds.
  • Pranava Adduri and Bruno Kurtic target agent DLP, not legacy perimeter security.
  • Sanjay Srivastava joined October 2026, adding AWS Lake Formation and Snowflake governance depth.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$35M

Above

Industry Average

Funded Over

2 Rounds

Notable Investors:
Series A funding typically happens when a startup has a product and some customers, and now needs funding to scale. This money is usually used to grow the team, expand marketing, and improve the product. Venture capital firms are frequently the main investors here.
Series A Funding Comparison
Above Average

Industry standards

$15M
$8.2M
$15M
$25M
$30M

Company News

Business Wire
Nov 10th, 2026
Bedrock Data adds agent data controls as NVIDIA's OpenShell joins the CNCF

Bedrock Data, a data security and AI governance provider, is expanding its role in OpenShell as the open source agent runtime moves to the Cloud Native Computing Foundation (CNCF) as a Sandbox project. NVIDIA contributed OpenShell, which governs how AI agents run, what data they can reach, and where inference is routed. Bedrock Data's Agent DLP for OpenShell, first released in September, adds data control to the runtime. It checks each agent action against company data policies, using context such as where data came from and who may use it. It then returns a verdict of allow, redact, or deny before data moves. The service is available now to Bedrock Data customers. Teams can start in observe-only mode and turn on enforcement when ready.

2WP
Oct 31st, 2026
Bedrock Data launches AI-driven owner-centric remediation.

Bedrock Data launches AI-driven owner-centric remediation. Bedrock Data has introduced AI-assisted remediation to tackle data exposure issues across enterprises. This new capability federates the work of fixing data exposure to the data owners, ensuring that remediation keeps pace with the rate of data creation. The process involves Bedrock Data discovering who owns each exposed dataset, opening a ticket for that owner in their existing workflow, and providing the necessary context to fix the issue. Once the owner closes the ticket, Bedrock Data validates that the exposure has been remediated and reopens the ticket if it hasn't. Scaling remediation with data owners. Enterprise data is vast, with petabytes of information, billions of records, and millions of documents. Centralized security teams are often small by comparison and struggle to fix exposure issues at scale. By involving data owners from engineering, data, and business teams, Bedrock Data's approach enables remediation to operate at a much larger scale. Conventional data security posture management (DSPM) tools often stop at providing visibility, leaving security teams with a growing list of exposures and no reliable way to get them fixed. According to Bedrock Data's Enterprise Data Security Confidence Index, 76% of respondents cited a lack of automation and too much manual work as major obstacles to data security. AI agents heighten exposure risks. The increasing adoption of AI raises the risk of unresolved exposures turning into leaks. AI agents and copilots can access data at machine speed, following permissions rather than business intent. Sensitive data left in a test environment or shared too broadly can now be discovered by AI systems, highlighting the need for effective remediation. Bruno Kurtic, CEO of Bedrock Data, noted that every enterprise has more data issues than its centralized data security team can handle. He emphasized that remediation only scales when data owners take ownership of the fix, and that Bedrock Data's approach enables this by finding the owner, sending the issue to their existing tools, and verifying the result. Federated remediation runs through existing IT service management (ITSM) systems, such as Jira and ServiceNow, which enterprises already use to track and resolve issues. This approach eliminates the need for new tools or training, allowing security teams to extend or override default routing with rules written in natural language. How federated remediation works. Bedrock Data handles three key steps in the remediation workflow: creating tickets and routing them to owners, examining each exposure and explaining it in context, and tracking the ticket to closure. The company's AI also answers questions inside the ticket and validates the fix once the owner marks the ticket as resolved. Verified fixes deliver audit trails for various regulatory frameworks, including PCI DSS 4.0.1, SOC 2, and NYDFS Part 500. This provides security leaders with the evidence they need to demonstrate to their board and auditors that exposures have been effectively remediated. Manish Chandela, EVP Information Security, Risk and Privacy at Sportradar, emphasized that lasting fixes must come from the teams who run the systems every day. He noted that Bedrock Data's approach enables this by putting each issue in front of the right owner, with the context to fix it, inside the tools they already use, and then proving the fix held. Quantified business benefits and Cost reduction. By automating the workflow and verifying remediation, Bedrock Data helps reduce the risk of leaks, misuse, and compliance violations, enabling enterprises to scale up AI adoption. According to IBM's 2026 Cost of a Data Breach Report, organizations that make extensive use of AI and automation in security operations had average breach costs $1.93 million lower and lifecycles 65 days shorter than organizations that didn't use them. The remediation feature is now generally available and bundled with the Bedrock Data platform. It works in real time, matching data creation rates and preventing exposures from piling up in a centralized security backlog. For defined fixes, the system can apply the correction directly, such as revoking document sharing based on sensitivity without a workflow, and it notifies the owner. Data owners may opt in to automatic remediation for recurring exposure types they are comfortable automating. An AI system can now locate exposed data and surface it within an answer. EY's 2026 AI Risk and Governance Survey reports that 85% of executives at firms using AI agents say those agents act without real-time human involvement.

AOL
Oct 6th, 2026
Bedrock Data names AWS and Snowflake Data Governance Veteran Sanjay Srivastava VP of Product.

Bedrock Data names AWS and Snowflake Data Governance Veteran Sanjay Srivastava VP of Product. Updated Oct 6, 2026 SAN MATEO, Calif.-(BUSINESS WIRE)-Oct 6, 2026- Bedrock Data, the data security and AI governance platform, today announced that Sanjay Srivastava has joined as Vice President of Product. Srivastava joins from Snowflake, where he led Data Sharing and Collaboration, one of the company's four core product pillars. Before that, he owned AWS Lake Formation, the governance platform at the center of AWS's analytics services. At Bedrock Data, he will lead product strategy and the product management team. AWS and Snowflake Data Governance Veteran Sanjay Srivastava joins Bedrock Data as VP of Product. At Bedrock Data, Srivastava will lead the product that makes data context the foundation for enterprise data security and safe AI adoption. Srivastava has worked on both sides of the problem enterprises now face with AI. At AWS, he built the controls that decide who can access data in the enterprise data lake. At Snowflake, he built the platform enterprises use to share data across teams, partners and clouds, and shipped AI products that put that data to work. That combination maps directly to the question every security team asks before approving an AI rollout: what data is this, is it sensitive and who or what can access it? "AI only creates value when it runs on an enterprise's most proprietary and differentiated data. The job is to enable that access safely, and that requires knowing what the data is, how sensitive it is and who and what can reach it," said Bruno Kurtic, CEO and co-founder of Bedrock Data. "Sanjay built data governance at AWS and data sharing at Snowflake, both at enterprise scale. He understands the teams that protect data and the teams that build on it." At AWS, Srivastava was Principal Product Manager for Lake Formation, the data lake management and governance service used by thousands of enterprises. He led the design and delivery of tag-based access control, cross-account data sharing and enterprise identity integration. At Snowflake, as Director of Product Management for Data Sharing and Collaboration, he built and led a team of senior product managers. He launched an internal marketplace that gives large enterprises visibility into their own data assets across business units, and built production agentic skills on Snowflake Cortex used by enterprise customers. He holds patents in high-performance data sharing and earlier built machine learning products at Conviva and Noosh. At Bedrock Data, Srivastava will own product strategy and the roadmap as the company makes data context the control point for enterprise AI. As AI agents take on more of the work inside the enterprise, every decision they make depends on knowing what the data is, who and what can access it, whether it is at risk and where it came from. Srivastava will lead the expansion of the Bedrock Data platform and the Metadata Lake engine that provides that context, so security, data and AI teams can govern every AI system from one shared understanding of their data. "Every enterprise is deciding right now how much of its data AI can touch, and most are deciding blind," said Srivastava. "Bedrock Data's Metadata Lake gives them the context to decide with confidence. I came here to build on that foundation and take it to every AI system they deploy." Srivastava joins as enterprises scale AI agents across the business. In September, Bedrock Data brought its data-aware policy enforcement to NVIDIA OpenShell, the open source agent runtime. The company is backed by a $25 million Series A led by Greylock Partners and strategic investment from Snowflake Ventures. Additional Resources About Bedrock Data Bedrock Data is a data security and AI governance platform built on an enterprise knowledge graph of the company's data: what it is, where it lives, where it came from, who can access it and how it is used. Bedrock Data builds and maintains that graph, its patented Metadata Lake, by discovering and classifying data in place across cloud, SaaS, AI and on-premises environments at petabyte scale, without moving data outside customer boundaries. Its open, API-first design delivers those facts to the tools already in the enterprise stack and makes them the basis for policy enforcement, AI governance and automated remediation. Security, data, infrastructure and AI leaders in technology, finance, healthcare and biotech rely on Bedrock Data to secure their data and accelerate AI without increasing risk. Learn more at bedrockdata.ai. Bhava Communications for Bedrock Data [email protected] KEYWORD: UNITED STATES NORTH AMERICA CALIFORNIA INDUSTRY KEYWORD: PROFESSIONAL SERVICES DATA MANAGEMENT SECURITY DATA ANALYTICS TECHNOLOGY SOFTWARE ARTIFICIAL INTELLIGENCE PUB: 10/06/2026 09:00 AM/DISC: 10/06/2026 09:03 AM

Valasys Media
Sep 28th, 2026
Bedrock Data adds Agent DLP to NVIDIA OpenShell for AI Agent security.

Bedrock Data adds Agent DLP to NVIDIA OpenShell for AI Agent security. Bedrock Data adds Agent DLP to NVIDIA OpenShell, bringing data-aware runtime controls to autonomous AI agents handling enterprise data. Priyanshi Kharwade. Last updated on: Sep. 29, 2026 Sept. 28, 2026 - Bedrock Data has integrated its Agent DLP technology with NVIDIA OpenShell, adding data-aware policy checks to a runtime designed to control how autonomous AI agents interact with enterprise systems. Announced Sept. 28, 2026, the integration is available to Bedrock Data customers through OpenShell's Supervisor Middleware. Key facts. * Bedrock Data announced the NVIDIA OpenShell integration on Sept. 28, 2026. * Agent DLP evaluates enterprise data context before OpenShell enforces an agent action. * The integration is delivered through OpenShell Supervisor Middleware. * NVIDIA OpenShell provides sandboxed controls over network, filesystem, process and credential activity. * Customers can initially use an observe-only mode before enabling enforcement. * The launch comes alongside NVIDIA's broader Open Agent Safety Platform initiative. According to the announcement, Bedrock evaluates the data involved in an agent request while OpenShell provides the runtime enforcement mechanism. The development comes as enterprises give AI agents greater access to databases, APIs, files, code and business applications. That creates a security issue: an agent may be authorized to perform an action while still handling information that should not be moved to a particular destination. What Bedrock Data adds to NVIDIA OpenShell. NVIDIA OpenShell is an open-source runtime that places AI agents inside isolated environments and applies security policies across filesystem, process and network activity. The NVIDIA OpenShell documentation describes a runtime architecture built around sandboxing and policy controls designed to restrict how agents interact with systems outside their execution environment. Bedrock Data adds information about the data itself to that decision process. Its Agent DLP technology evaluates an agent request against enterprise data policies and returns a decision that OpenShell can enforce. For CISOs, the distinction is important. Conventional permissions determine whether an agent is authorized to access a resource. The Bedrock approach attempts to determine whether the specific information involved in that authorized action should be allowed to move. A permitted database operation, for example, could still be restricted if the underlying data is classified as sensitive and the destination violates enterprise policy. NVIDIA broadens its AI agent security push. The integration arrives as NVIDIA expands its broader approach to AI-agent security. The company announced the NVIDIA Open Agent Safety Platform on Sept. 28, positioning OpenShell as part of a wider architecture for monitoring and controlling autonomous agents. NVIDIA said more than 100 organizations are working with technologies around the platform, including Anthropic, Cisco, CrowdStrike, Microsoft, Palo Alto Networks, Salesforce, SAP, ServiceNow and JPMorganChase. For NVIDIA, the strategy extends security beyond controls embedded inside individual AI models. OpenShell instead acts as an external runtime boundary where agent activity can be governed while tasks are being executed. For cybersecurity companies such as Bedrock Data, that creates another integration point for data protection and AI-governance technologies. What CISOs need to evaluate. Enterprise security leaders are increasingly being asked to govern AI agents capable of taking multi-step actions with limited human intervention. A Cloud Security Alliance survey on enterprise AI agents reported in April that 82% of surveyed organizations had unknown AI agents operating in their environments, while 65% reported an AI-agent-related incident during the previous 12 months. The research was commissioned by Token Security, so its sponsorship should be considered when interpreting the findings. For CISOs evaluating technologies such as Bedrock Data and OpenShell, the questions extend beyond whether a policy can technically block an action. Security teams will need evidence around latency, policy accuracy, false blocking, auditability and the effectiveness of controls when agents move between multiple tools and systems. Bedrock Data and NVIDIA have not publicly released independent production benchmarks for the combined integration. Developers and data-governance teams also have a stake. AI engineering teams could benefit from moving some enforcement outside individual agent frameworks rather than rebuilding equivalent controls for every AI application. For data-governance teams, the integration introduces another consideration: whether existing classifications and metadata are accurate enough to support runtime decisions. Bedrock Data says its Metadata Lake tracks information including what enterprise data is, where it resides, who can access it and how it is being used. That means policy decisions can potentially consider data context instead of relying solely on an agent's technical permissions. The effectiveness of that approach, however, depends on the quality and currency of the underlying metadata. Standards bodies are focusing on the same problem. The industry is also developing broader frameworks for autonomous-agent security. In February 2026, the U.S. National Institute of Standards and Technology launched its AI Agent Standards Initiative, focusing on secure and interoperable AI agents as autonomous systems gain greater access to external applications and enterprise information. That provides wider context for the Bedrock-NVIDIA development: runtime governance is emerging as a distinct security layer as enterprises move from AI assistants toward software capable of independently executing business tasks. Bedrock Data says Agent DLP for NVIDIA OpenShell is available now, including an observe-only mode that allows organizations to record policy decisions before switching on enforcement. For enterprise buyers, the next test will be how the technology performs in production environments, particularly across multiple AI frameworks, complex data estates and regulated workloads. Priyanshi Kharwade is a content writer specializing in B2B marketing and AI-driven revenue strategies. She approaches the GTM stack by treating every campaign as a study in behavioral science. Beyond that, she explores how internet culture and society intersect as the founder of Konsume. Currently studying communication, she tracks how media and technology shape human decision-making, bringing that exact perspective into everything she writes. say hi to Priyanshi

Yahoo Finance
Sep 28th, 2026
Bedrock Data integrates with NVIDIA OpenShell to enforce data-aware policies for AI agents

Bedrock Data has integrated its Agent DLP platform with NVIDIA OpenShell to provide data-aware policy enforcement for AI agents. The integration adds a policy evaluation layer where Bedrock Data assesses request payloads against enterprise data policies after OpenShell authorises them. NVIDIA OpenShell is an open source agent runtime that provides a secure, zero-trust environment for autonomous agents. Bedrock Data's technology addresses a key limitation: whilst permissions control which resources agents can access, they cannot distinguish between sensitive and harmless data within permitted operations. The platform evaluates agent actions based on data context, origin, combinations, and destination policies. OpenShell then enforces Bedrock Data's decisions at runtime, blocking actions when necessary. This helps prevent agents from inadvertently exposing sensitive data whilst completing tasks. The integration is available to Bedrock Data customers today.

Recently Posted Jobs

Sign up to get curated job recommendations

Bedrock Data is Hiring for 5 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs