Kiteworks adds Cyera classifications to data policies

Kiteworks said Oct. 27 it has integrated with Cyera so files uploaded into Kiteworks can inherit Cyera data classifications and trigger policy enforcement across email, file sharing, SFTP, managed file transfer, APIs and AI integrations. The move is meant to help organizations apply the same controls to data in motion and in use, including for people, machines and AI agents.

Why it matters: - The integration is designed to turn data classification into action, reducing the chance that sensitive files move, share or get requested outside policy. - Kiteworks customers can apply Cyera-driven controls across multiple exchange channels, including AI workflows. - The update matters for organizations that need stronger governance, auditability and compliance around private data.

What happened: - Kiteworks announced an integration with Cyera that brings Cyera classifications into the Kiteworks Data Policy Engine. - Files uploaded to Kiteworks are tagged with their Cyera classification when Cyera has the file in inventory. - The integration applies to email, file sharing, SFTP, managed file transfer, APIs and AI integrations. - The announcement was made Oct. 27, 2026.

The details: - Kiteworks looks up each uploaded file in Cyera by a unique file identifier without exposing file data or metadata. - Cyera returns the file classification if the file exists in its inventory, and Kiteworks applies that tag. - Kiteworks then uses the tag, user attributes and the requested action to allow, block, require approval for or restrict access. - The policy engine applies those controls to people, machines and AI agents. - The integration uses the Cyera API and an API token. - A scheduled sync runs daily by default and compares Kiteworks records with Cyera by unique identifier. - The sync removes classifications that no longer exist. - The integration supports sources whose files are identified by SHA-256 or MD5 hashes. - Kiteworks records the requested action, user, tags and affected files to support audit and governance requirements. - Kiteworks says its platform supports compliance reports for CMMC 2.0, GDPR and HIPAA. - Kiteworks says it is FedRAMP Class D Agency Auth in Progress (High In Process), FedRAMP Class C Certified (Moderate Authorized), holds a FIPS 140-3 validation and maintains SOC 2 Type II certification.

Between the lines: - The announcement shows a push to make data classification portable across the systems where data is actually used, not just stored. - The AI-specific language signals that security teams are increasingly trying to extend the same controls to automated agents that already apply to employees. - The focus on no file data or metadata exposure suggests the companies are positioning the integration as lower risk than a deeper file inspection workflow.

What's next: - Kiteworks is pointing customers to a solution brief for more details on the integration. - Security, IT, risk, compliance and data privacy leaders can request a seat at the Kiteworks dinner during datasecAI by Cyera on Nov. 9. - Kiteworks will continue positioning the platform as a governed data exchange layer for regulated industries, including financial services, healthcare, life sciences, government and defense, manufacturing and legal. - Cyera will continue using the integration to extend its data classification layer into downstream policy enforcement.