Kiteworks has integrated Cyera’s data classifications into its Data Policy Engine, enabling organizations to apply data security policies across email, file sharing, managed file transfer, APIs and AI integrations.

The integration allows files uploaded to Kiteworks to be tagged with their Cyera classification. Organizations can then use those classifications to control how sensitive data is shared, sent and accessed.

Cyera’s Data Security Posture Management (DSPM) platform provides data intelligence to help organizations understand, prioritize and reduce data risk across the enterprise. Its classifications identify the data organizations hold and its sensitivity, while the Kiteworks integration extends that information into systems used to exchange data.

When a file is uploaded, Kiteworks uses a unique file identifier to look up the file in Cyera without exposing file data or metadata. If the file exists in Cyera’s inventory, the platform returns its classification and Kiteworks applies the corresponding tag.

The Kiteworks Data Policy Engine then evaluates the classification alongside user attributes and the requested action to determine whether to allow or block the action, require approval or impose restrictions. The process applies to people, machines and AI agents.

The integration uses the Cyera API and an API token. A scheduled synchronization, set to run daily by default, compares Kiteworks records with Cyera using unique identifiers and removes classifications that no longer exist. The integration also supports sources that identify files through SHA-256 or MD5 hashes.

“A classification only matters if something acts on it,” said Tim Freestone, chief strategy officer at Kiteworks. “Kiteworks reads the Cyera classification when a file is uploaded, and the Data Policy Engine then evaluates each request for that file against it. The same process applies whether the requester is a person, a machine, or an AI agent.”

Kiteworks holds a FIPS 140-3 validation and SOC 2 Type II certification. The company is also FedRAMP Class D Agency Auth in Progress (High In Process) and FedRAMP Class C Certified (Moderate Authorized). It provides compliance reports for CMMC 2.0, GDPR and HIPAA and records requested actions, users, tags and affected files to support audit and governance requirements.

The company’s Compliant AI approach extends the same governance to AI agents alongside people, serving organizations in financial services, healthcare and life sciences, government and defense, manufacturing and legal sectors.

Kiteworks also invited security, IT, risk, compliance and data privacy leaders to request a seat at its dinner during datasecAI by Cyera on Nov. 9 to discuss how data classification and governed data exchange work together. The company has made a solution brief available with additional details about the integration.