KITEWORKS has announced the acquisition of AI data security company Bonfy[.]AI, a move described as extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents. The deal’s financials were not disclosed, but estimates reported by CTech place the price in the tens of millions of dollars.
Bonfy[.]AI brings an AI-native content-security platform that can classify data in real time, enforce contextual security policies, and govern cross-SaaS data usage, enabling inline decisions as data is exchanged rather than after the event.
The intention is to extend Kiteworks’ policy enforcement across both human and AI-driven workflows in motion and at use, across email, file sharing, SaaS apps, data repositories, Internet-facing AI assistants, and autonomous agents. The integration aims to close a perceived gap where enterprises can inventory sensitive data but cannot consistently control what happens to it when it is used or transferred, particularly at runtime.
Bonfy’s technology purportedly enables runtime classification and policy application before a transfer completes, with a single policy model spanning people, machines, and systems. Kiteworks emphasises an inline at runtime approach to data control, promising governed decisions that can be demonstrated to regulators months later, thus extending its Data Control Plane and broadening coverage across AI and human data exchanges.