
Work Here?
Industries
Data & Analytics
Enterprise Software
Cybersecurity
Company Size
51-200
Company Stage
Series E
Total Funding
$266.2M
Headquarters
Boston, Massachusetts
Founded
2015
Immuta provides a cloud-based data security platform that helps organizations protect data in the cloud and meet regulatory requirements. It scans and classifies sensitive data, allowing data owners to create and enforce data policies using Attribute-Based Access Control (ABAC) based on user, data, and environment attributes. It also tracks data use and flags risks for remediation to support compliance. Immuta integrates with major cloud providers and aligns with the NIST cybersecurity framework, offering a single service that combines sensitive data discovery, access control, and data-use monitoring. Unlike competitors, it emphasizes policy-driven, attribute-based access control across cloud environments and end-to-end data protection, rather than just simple encryption or user-based permissions. The company's goal is to help businesses securely manage their data in the cloud and stay compliant with data protection regulations.
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$266.2M
Meets
Industry Average
Funded Over
6 Rounds
Industry standards
Medical, dental, & vision premiums
100% employer paid mental wellness platform
Stock Options
Wellness perks
Paid parental leave
Unlimited PTO
Learning and Development Resources
Immuta has launched the first data provisioning platform for managing AI agent access to enterprise data. The new Agentic Data Access capabilities treat AI agents as first-class identities with their own attributes and audit trails, enabling them to act on behalf of users without impersonation or standing privileges. The platform addresses challenges in enterprise AI deployment, where traditional provisioning models rely on static roles and manual approvals unsuitable for agents operating continuously at machine speed. Immuta's solution evaluates requests against centrally defined policies and provisions temporary access directly in data platforms like Snowflake and Databricks, automatically removing permissions when tasks complete. The company plans to extend these capabilities with semantic governance and agent-initiated access requests, enabling real-time, question-driven provisioning whilst maintaining governance and accountability.
Introducing Agentic Data Access: the next era of Data Provisioning. Matt Carroll, CEO & Co-founder Published March 23, 2026 Last edited: March 25, 2026 On this page. For years, enterprise data access was built around a simple assumption: the requester was human. That world is changing fast. AI agents are moving from copilots to active participants in enterprise workflows. They don't just retrieve answers, they search for data, plan how to answer questions, adapt when they hit roadblocks, and increasingly act on behalf of employees and systems. They run 24/7, generate queries dynamically, move across platforms continuously, and expect access decisions in seconds, not days. Immuta Inc. knew the industry was heading here. What surprised Immuta Inc. was the speed. In what feels like no time at all, the market has moved from an era of human-centered governance to one where agents are beginning to operate independently and request access to data on behalf of humans in the flow of work. That shift is exactly why Immuta Inc. is announcing Agentic Data Access, a new capability within the Immuta Data Provisioning Platform. This is a big announcement for Immuta. But it's not a pivot. It's the next logical step in a journey Immuta Inc. has been building toward for years: from fine-grained data security, to modern data provisioning, to agentic governance at machine speed. Since 2018, as enterprise data moved deeper into the cloud, Immuta has been building a centralized and decoupled authorization layer so policy can be enforced where the data lives, no matter where it lives. Agents did not change that direction. They simply made the need immediate. The old access model breaks at AI scale. In early AI deployments, many organizations have taken the most obvious path: let the agent log in as the human asking the question. That may be enough for a pilot, but it doesn't work at enterprise scale. When agents impersonate humans, every potential AI user needs their specific access to be provisioned across every data system the agent might touch. That creates account sprawl. To keep agents from failing mid-task, organizations often grant broader and longer-lived permissions than the task actually requires. That increases exposure risk and fuels rights inflation. And because the query appears to come from the human identity, audit trails become muddy. Was that data accessed by a person, by an agent acting independently, or by an agent acting on behalf of a person? Most importantly, impersonation creates human-limited AI. The moment an agent hits a semantic or permission wall, it stalls, even when the right data exists and could potentially be discovered, requested, and provisioned safely. Human-scale processes also cannot keep up with AI-scale demand. Generative AI has already turned far more people into data consumers. Agentic AI multiplies that pressure by turning every workflow into a potential source of dynamic, machine-speed access requests. Static roles, standing privileges, and ticket-driven approvals were never designed for that world. Agents are a new identity type. To work safely at enterprise scale, agents cannot be treated as shadow users, generic service accounts, or invisible extensions of human credentials. They need to be governed as first-class identities. That means recognizing what makes them fundamentally different from humans. Humans work in bursts. Agents run continuously. Humans can tolerate friction and delay. Agents are designed to operate in real time. Human access patterns are relatively bounded and explainable. Agent activity is dynamic, adaptive, and high-volume by design. A modern access model has to account for all of that. It has to understand who the agent is, who it is acting for, what it is trying to do, what data it needs, and how long that access should last. It also has to make those decisions quickly, consistently, and with a clear audit trail. What Immuta is launching. Immuta's Agentic Data Access capabilities are built for exactly this moment. With Agentic Data Access, Immuta treats AI agents as first-class participants in the data ecosystem. Rather than borrowing a user's identity, the agent has its own identity, attributes, intent, and audit trail. When an agent needs data, Immuta evaluates the request in context: who is acting, who the agent is acting for, what data is being requested, and why it is needed. Based on centrally defined policies, Immuta then provisions temporary access directly in the underlying data platform - such as Snowflake, Databricks, or BigQuery - granting only the access required for that task and automatically removing it when the task is complete. This is a fundamentally different model than pushing authorization decisions up into the LLM tier and hoping for the best. Immuta enforces deterministically at the data platform tier, where governance has to be real, provable, auditable, and fast enough to keep up with machine-speed workflows. What this enables. * Agents act on behalf of users, not as users. * Access is just in time, least privilege, and ephemeral. * Every action is traceable across the human, the agent, the purpose, and the data accessed. * Enterprises reduce account sprawl, eliminate standing privileges, and preserve accountability. Why Immuta is uniquely positioned. What makes this announcement powerful is not just the product capability. It is the architecture, operating history, and customer proof behind it. This is not Immuta trying to bolt AI language onto a legacy access model. It is the natural extension of the platform Immuta Inc. has been building from the beginning. Since the cloud era took hold in 2018, Immuta Inc. has been building an abstract and decoupled policy management layer into cloud data infrastructure so governance teams can author policy once and enforce it natively across a complex data ecosystem. That architectural choice matters now more than ever. Agentic access cannot be governed reliably from a layer that sits above the data and guesses. Policy has to perform in real time, provision access just in time, and leave behind a clear audit trail in the underlying data platforms where enterprise governance actually lives. That is why, in its view, no company is better positioned to perform and scale policy for the agentic era. Many companies talk about policy. Very few have proven they can author it once, enforce it natively, and operate it across the scale, complexity, and regulatory demands of the world's largest enterprises. Immuta does this with some of the biggest and most complex organizations in the world, including J.P. Morgan, Booking.com, Cigna, Roche, General Motors, and many more. These are enterprises with global operations, sensitive data, strict compliance requirements, and high expectations for performance. If a policy model can hold up there, it can hold up in a world where agents are making requests continuously, across systems, at machine speed. You can think of Immuta's evolution in three eras. Era 1 was data security: separate policy from platform, author once, and enforce fine-grained access natively across a complex data ecosystem. Era 2 was data provisioning: move beyond static entitlements and manual tickets to a workflow-driven model where access can be requested, reviewed, approved, potentially automatically through deterministic rules, and provisioned quickly and safely. Era 3 is agentic governance: govern access for a world where the fastest-growing class of data consumer is non-human. It may feel like the market jumped from Era 1 to Era 3 overnight. But Era 2 is exactly what makes Era 3 possible. You cannot safely support agentic access without policy externalization, native enforcement, approval routing, just-in-time provisioning, and unified auditing already in place. The market compressed those eras faster than anyone expected. What looked like a future roadmap started arriving all at once. But the reason Immuta can meet this moment is that Immuta Inc. already built the core pieces, and Immuta Inc. built them into the cloud data stack where governance has to happen. That is why this is not a pivot. It is a continuation. Immuta Inc. has been building toward a world of dynamic, policy-based, real-time access for years. AI agents simply made the need urgent. Where this goes next. The next step is helping agents understand not just whether they can access data, but how to use the right data safely and efficiently. That is where semantic governance comes in: extending access awareness into the semantic layer so agents can understand which metrics, fields, and relationships a user is allowed to use before they ever generate a query. After that comes question-time approval: the ability for agents to request additional access on behalf of users in real time, with deterministic policy automation for straightforward cases and human review for exceptions. Together, those capabilities move the industry beyond access control and into access orchestration - where agents can safely discover, request, and use data in a governed, auditable, machine-speed workflow. A new era of data access. Immuta Inc. is entering a world where more access requests will come from agents than from people. The organizations that win in that world will not be the ones that simply open the floodgates or lock everything down. They will be the ones that can provision the right access for the right task at the right time, with governance, accountability, and speed built in. That is the future Immuta is building. And while the moment arrived faster than Immuta Inc. expected, the direction did not surprise Immuta Inc. at all. Put all your data to work. Safely. Innovate faster in every area of your business with workflow-driven solutions for data access governance and data marketplaces.
Immuta delivers the building blocks of modern data provisioning with new automation and guardrails. News provided by. New guardrails, policy exception workflows, and multi-approver capabilities lay the foundation for automated, governed data access at enterprise scale. BOSTON, Oct. 21, 2025 /PRNewswire/ - Immuta, the data provisioning company, today announced a major expansion of its platform, introducing Guardrail Policies, Policy Exception Workflows, and Multi-Approver Workflows - three capabilities that form the building blocks of modern data provisioning. Data provisioning delivers governed data safely and dynamically - by policy or on demand by request - giving humans and AI agents secure access at scale. Together, these capabilities balance automation and oversight - using guardrails to prevent approval mistakes, policy exceptions to manage unique or time-bound data needs, and multi-approver workflows to keep human judgment in the loop. With general availability, Immuta's Marketplace delivers governed, self-service data access in minutes and serves as the foundation for integrating with the broader data consumer ecosystem - wherever and however users engage with data. With this release, Immuta turns data provisioning from a slow, manual approval process into an automated workflow that unites policy-driven and request-driven access. Enterprises can now provision governed data in minutes, not weeks - ensuring the right users and AI agents always get the right data. The result: faster insights, safer collaboration, and AI initiatives that move at the pace of innovation. These capabilities reflect Immuta's evolution into the data provisioning company - combining automation and accountability to meet AI-era data demand. As access requests surge, Immuta automates approvals, streamlines exceptions, and enforces guardrails up front - turning governance from a bottleneck into a business accelerator. "For today's CDO, data provisioning isn't just a process - it's the strategy," said Matthew Carroll, CEO and Co-founder of Immuta. "As GenAI expands the universe of data consumers, static approvals and legacy governance systems can't keep pace. Our new guardrail policies and policy exception workflows are the building blocks of a smarter framework - one that protects by default, empowers by design, and scales with the business." Early adopters are using these capabilities to modernize their governance workflows and move faster with confidence. Proactive, automated control for every stage of data access These capabilities balance automation and oversight, giving governance, IT, and data teams control at every step. * Guardrail Policies (GA): Define non-negotiable eligibility rules - such as jurisdiction, clearance level, or training status - so only qualified users can request access. Guardrails block unqualified requests at the source, reducing risk and wasted time while ensuring compliance. * Policy Exception Workflow (Public Preview): Enable end users to request governed exceptions - for example, to temporarily unmask sensitive data - through a structured workflow instead of ad-hoc emails or tickets. Approvals can be time-bound or promoted into reusable, auditable policies that scale across the organization. * Multi-Approver Setup (GA): Support complex approval chains with multiple stakeholders - such as data owners, governance teams, and security - without slowing decisions. These new features advance Immuta's automated provisioning framework; with the Marketplace now generally available, the full data access lifecycle is complete. * Marketplace (GA): Provides one governed place to discover and provision data assets. Users can see applicable policies, request changes, and gain immediate approval. Meeting the demands of AI-scale data access Generative AI has turned every employee, system, and agent into a potential data consumer - multiplying access requests by orders of magnitude. Legacy identity governance and ticketing systems were built for static, predictable environments, not today's dynamic, AI-driven enterprise. Immuta is driving a fundamental shift from legacy access control to software-driven data provisioning - a model only Immuta delivers at enterprise scale. This approach unites policy automation and request-based access in one platform, enabling organizations to deliver governed data safely and dynamically to both humans and AI. Guardrails prevent inappropriate requests, exception workflows keep approvals consistent, and multi-approver chains ensure proper oversight - all without slowing innovation. By embedding directly into data catalogs and marketplaces, Immuta connects discovery and governed access in one motion. This integration-first model gives enterprises the only end-to-end system that provisions by policy and by request - turning governance from a bottleneck into a catalyst for faster, safer data use across the modern enterprise. For more information visit: https://www.immuta.com/blog/october-2025-provisioning-update About Immuta Since 2015, Immuta has helped Fortune 500 companies and government agencies put data to work faster and more safely than ever before. As organizations face exploding demand for data access from both human and AI systems, Immuta's platform automates data provisioning and governance across complex ecosystems. By eliminating manual processes that create access delays, Immuta helps enterprises provision secure access at unprecedented speed while maintaining continuous compliance. SOURCE Immuta
Immuta adds provisioning prowess to speed insight generation. Featuring automation capabilities, the new tools dramatically reduce the time it takes to operationalize governed data and could help differentiate the vendor from its peers. Immuta on Tuesday introduced new data provisioning capabilities designed to better enable customers to access and deliver governed data to agents and other applications. Data provisioning is the process of making data available precisely when and where it is needed. It includes collecting data from disparate sources, preparing and transforming the data so it can be consumed, and delivering it to its proper target destination. Immuta's new features, which include automation capabilities, aim to reduce what has historically been a weeks-long, manual provisioning process down to minutes. They include Guardrail Policies to put governance measures in place that automate access to data, Policy Exception Workflow to enable users to ask for exceptions through a structured workflow rather than ad hoc requests, and Multi-Approver Setup to help data owners and governance teams automate data provisioning policies. Guardrail Policies and Multi-Approver Setup are generally available while Policy Exceptions Workflow is in public preview. In addition, Immuta made Marketplace, a governed hub where users can discover and provision data assets, generally available. Given that real-time decision-making is crucial to many businesses, and agents need diverse real-time data to properly behave, Immuta's new features are "highly significant" for the vendor's users, according to Stephen Catanzano, an analyst at Omdia, a division of Informa TechTarget. "The combination of guardrails, exception handling and multi-approver capabilities with the Marketplace creates a complete end-to-end system that can handle policy-driven automatic approvals and request-based access in one platform, which is particularly crucial as AI exponentially multiplies data access requests," he said. Based in Boston, Immuta is a data governance and security vendor that competes with specialists including Satori and Privacera and broader-based data management vendors with governance capabilities such as Alation, Collibra and Informatica. Powering provisioning. Historically, data-driven decision-making had plenty of lag time. Data was often controlled by a central team, and requests for reports and other data assets generally took weeks - sometimes months - to fulfill. The rise of self-service analytics around 2010 changed that to some degree, but weekly, monthly and quarterly reports were still the basis for many of the insights that led to decisions and actions. Worldwide events beginning in 2020 such as the COVID-19 pandemic, the war in Ukraine, repeated supply chain disruptions and economic uncertainty radically altered the speed that decisions had to be made, placing greater emphasis on real-time data. Surging interest in AI, sparked by OpenAI's November 2022 launch of ChatGPT, has only heightened the emphasis on real-time decision making. Reducing what had been a time-consuming provisioning process down to minutes is therefore crucial, according to William McKnight, president of McKnight Consulting. "Immuta's Marketplace and structured workflows accelerate secure data provisioning at enterprise scale, eliminating the bottleneck that slows analytics and AI initiatives," he said. "By automating fine-grained access controls across cloud platforms, Immuta enables faster data use by both human users and AI agents without compromising security." Perhaps the most valuable new feature is Guardrail Policies, McKnight continued. "While the Marketplace delivers the speed, the Guardrail Policies stand out as crucial for governance teams because they ensure the integrity and safety of the system, allowing the rapid speed afforded by the Marketplace to be sustainable at scale," he said. Catanzano likewise called out Guardrail Policies. But while McKnight noted that the feature fosters speed and scale, Catanzano highlighted its preventative nature, particularly with AI agents capable of taking on tasks without human involvement. Beyond the individual features that comprise Immuta's improved data provisioning capabilities, the suite is designed to integrate with data catalogs and other governance platforms to further speed and simplify the provisioning process. The rise of generative AI (GenAI) and AI agents provided Immuta with the impetus for developing its new capabilities, according to Matt Carroll, the vendor's CEO. GenAI has enabled more people within organizations to work with data, he noted. However, in doing so, it has also exposed enterprises to a greater risk of data breaches and regulatory noncompliance. "With so many new data consumers, the challenge becomes how to make data discoverable and accessible while still enforcing the right policies and controls," Carroll said. "That's what led us to develop data provisioning workflows." While valuable for Immuta's users, whether the new data provisioning capabilities can help the vendor stand out from its competitors remains to be seen, according to Catanzano. Immuta's new features comprise a unified data provisioning workflow that automates processes that previously took significant time, but vendors such as Informatica also provide data provisioning capabilities, he noted. "Immuta's focus on AI-scale access requests may differentiate it from traditional governance tools that weren't built for dynamic, high-volume environments," Catanzano said. "But... I don't think it's a major differentiator. All the major players moving and governing data have a strong story here, but with some nuances." McKnight similarly mentioned speed as a way Immuta might separate from other vendors. While many provisioning platforms show users what data exists and allow them to request access, Immuta's automates secure provisioning. "Immuta automatically applies the right policies - masking, filtering, anonymization - at query time across cloud platforms," McKnight said. "It's the difference between discovering data and actually getting governed access to it in minutes [rather than] weeks." Next steps. Looking ahead, Immuta is planning to add native integrations with data warehouses and database platforms to make it easy for customers to access data where it lives, according to Carroll. In addition, the vendor plans to deepen partnerships with data catalogs, add conversational interfaces to simplify using its tools and launch its Agentic Data Governor, he continued. "Thematically, 2025 and early 2026 are about expanding connectivity, embedding Immuta wherever data is discovered, bringing governance into conversational AI, introducing native AI to accelerate access and decision-making and delivering intelligent, customer-specific governance agents that redefine what secure, automated data provisioning looks like," Carroll said. Focusing on AI governance capabilities with tools such as the Agentic Data Governor is wise, according to McKnight, who noted that while the new data provisioning tools advance one part of Immuta's platform, others also need improvement. "The company must advance its GenAI governance by building dynamic prompt and output controls that detect and protect sensitive data in [large language model] interactions in real time," McKnight said. In addition, adding native connectors to broaden its data integration capabilities and evolving from alert-based monitoring of policy violations to automated remediation are ways Immuta could better serve its users, he continued. Catanzano, meanwhile, suggested that Immuta add AI-powered capabilities to its provisioning suite, among other ways the vendor could potentially advance its offerings. "Immuta could expand into AI-native features like intelligent policy recommendations based on usage patterns or real-time data quality scoring within the provisioning workflow to ensure AI systems get not just governed data, but high-quality governed data automatically," he said. Eric Avidon is a senior news writer for Informa TechTarget and a journalist with more than 25 years of experience. He covers analytics and data management.
Immuta, a leader in data security, has introduced Immuta AI, an innovative layer within its platform designed to enhance data governance through artificial intelligence.
Find jobs on Simplify and start your career today
Industries
Data & Analytics
Enterprise Software
Cybersecurity
Company Size
51-200
Company Stage
Series E
Total Funding
$266.2M
Headquarters
Boston, Massachusetts
Founded
2015
Find jobs on Simplify and start your career today