Kiteworks
About
Kiteworks provides a unified platform for secure and compliant sensitive data exchange, governing how employees and AI agents access, share, and transfer data across channels including email, file sharing, managed file transfer, SFTP, web forms, and APIs. The platform enforces identity, policy, encryption, and audit controls through a single data policy engine and unified audit log, supporting compliance with frameworks such as HIPAA, CMMC, GDPR, FedRAMP, and ITAR. Kiteworks serves over 3,800 en...
Details
VenSearch Intelligence
Ideal Customer
- Kiteworks targets mid-market to large enterprise organizations and government agencies, with its heaviest customer concentration in the 1,000–4,999 employee range, followed by organizations with 10,000+ employees.
- Its ideal customer is a regulated enterprise or government agency that handles sensitive data — PII, PHI, CUI, or intellectual property — and faces rigorous compliance mandates such as CMMC, HIPAA, FedRAMP, or GDPR.
Key Differentiators
- Kiteworks positions itself as the only security platform FedRAMP-authorized to provide unified support across file sharing, managed file transfer, and email data communications under a single compliance framework and unified audit log — a claim it uses to distinguish itself from point-solution competitors such as Progress MOVEit, GoAnywhere, Egnyte, Box, and ShareFile.
- Its single-tenant-by-design hardened virtual appliance architecture ensures full data sovereignty, and its Data Control Plane with ABAC-based policy enforcement is designed to map directly to regulatory frameworks including CMMC 2.0, HIPAA, GDPR, FedRAMP, and ITAR from a single control plane.
Industries Served
- Kiteworks primarily serves highly regulated industries including government and defense contractors (CMMC, CUI, FCI compliance), healthcare (HIPAA, PHI), financial services (PCI DSS, GDPR), legal, manufacturing and engineering, pharmaceuticals and life sciences, higher education, professional services, and technology.
- The platform is specifically positioned for organizations requiring compliance with frameworks like CMMC 2.0, FedRAMP, HIPAA, GDPR, ITAR, and NIST 800-171.
Service Coverage
- Kiteworks operates globally, with headquarters in San Mateo, California, and a presence across North America, Europe, and Asia-Pacific.
- The company protects over 100 million end-users across more than 1,500 global enterprises and government agencies, with customers including NYC Health + Hospitals, KPMG, the UK National Health Service, Purdue Pharma, and Tyler Technologies.
Partnerships
- Kiteworks maintains a formal Technology Partner Program with named enterprise integrations including AWS, Microsoft (including Microsoft Office 365 and Microsoft Purview/MIP label compatibility), and Salesforce (with a dedicated native plugin).
- The platform also integrates with iManage (for legal workflows), Google Drive, SharePoint, OneDrive, Box, and Dropbox for content repository access, and supports SIEM integrations including a dedicated Kiteworks Splunk App, as well as DLP, ATP, and SOAR systems.
Company Size & Ownership
- Kiteworks was founded in 1999 by Jonathan Yaron (who serves as Chairman and CEO) and is headquartered in San Mateo, California.
- The company employs approximately 384 people across five continents as of mid-2026, with estimated annual revenue of approximately $130M (as of September 2025, per third-party estimates), and achieved unicorn status with a $1B+ valuation in its August 2024 funding round.
Compliance & Certifications
- Kiteworks holds an extensive compliance portfolio including SOC 2 Type II (achieved for six consecutive years, audited by Moss Adams), ISO 27001, ISO 27017, and ISO 27018 (second consecutive year), and FedRAMP Moderate Authorization maintained continuously since June 2017.
- In February 2025, its Secure Gov Cloud achieved FedRAMP High Ready status following independent assessment by Coalfire Systems, and as of March 2026, Kiteworks advanced to FedRAMP High In Process status.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
17 offeringsChannel Partner / Reseller Program
A reseller partner program that allows channel partners to resell Kiteworks platform products and solutions to enterprise and government customers. The program includes a dedicated Reseller Portal for partner access and a Reseller Locator for customers to find authorized resellers. Partners gain access to Kiteworks sales, marketing, and technical resources to support their resale activities.
CISO Dashboard
A real-time visibility and reporting tool that provides drill-down insight into who sent what, to whom, when, and where across all Kiteworks channels including email, file sharing, MFT, SFTP, APIs, and web forms. It detects suspicious activity and data anomalies, and feeds directly into SIEM systems to reduce response time and eliminate manual compliance reporting. Custom dashboards and reports can be created, and the platform includes a Kiteworks Splunk App for integration with that SIEM tool.
Data Control Plane
A single policy framework and unified audit log that governs sensitive data exchanges across every channel including email, secure file sharing, managed file transfer, APIs, and data forms. The Data Policy Engine uses attribute-based access control (ABAC) to evaluate every data exchange in real time based on what data is involved, who or what agent is taking the action, and what they are trying to do. Policy controls map directly to regulatory frameworks including CMMC 2.0, HIPAA, GDPR, FedRAMP, and ITAR.
Email Protection Gateway (EPG)
An email security gateway that automatically enforces data policies on every inbound and outbound email, including encryption, routing, quarantine, and rejection, based on sender, recipient, data content, classification labels, and message attributes without requiring user action. EPG reads Microsoft Purview (MIP) sensitivity labels to apply the correct policy automatically and supports encryption delivery via webmail/TLS, S/MIME, or OpenPGP with all key management handled by the system. It logs every inbound and outbound message with normalized, immutable records that feed directly into SIEM systems and supports attachments up to 16 TB.
Integration Suite
A suite of integrations and REST APIs that provide programmatic access to Kiteworks platform capabilities using secure, scoped authentication for custom applications and automation. It includes plugins for Salesforce and iManage, Microsoft Office 365 plugins for real-time collaborative editing, SCIM provisioning, and access to enterprise content repositories including SharePoint, OneDrive, Box, and Dropbox. The suite enables developers and AI agents to build governed workflows connected to existing enterprise systems.
Kiteworks Compliant AI
A governance layer that sits between AI agents and sensitive enterprise data, intercepting every agent interaction to verify identity, enforce ABAC policy, apply FIPS 140-3 Level 1 validated encryption, and capture tamper-evident audit logs before any data is accessed, transferred, or acted upon. The solution ships three ready-to-deploy Governed Assists for folder operations, file management, and forms creation, each enforced end-to-end by the data policy engine. Every agent is assigned a unique identity bound to the delegating human, and agent access tokens can be instantly revoked without impacting human sessions.
Kiteworks Private Data Network
A unified zero-trust data exchange protection platform that secures sensitive information across all communication channels including email, file sharing, and APIs. It provides centralized controls, automated compliance enforcement with preconfigured templates for GDPR, HIPAA, and CCPA, comprehensive data classification, and immutable audit logs. The platform supports on-premises, private cloud, hybrid, and FedRAMP deployment options.
Managed File Transfer (MFT)
An enterprise managed file transfer solution built on a hardened virtual appliance with high-availability clustering for cloud, on-premises, or hybrid deployments. It features a drag-and-drop workflow authoring interface with a library of over 2,000 connectors and workflow functions requiring no coding, and supports scheduling, polling, event-based, and manual transfer triggers. The solution includes centralized policy enforcement, a unified audit log with automated SIEM feeds, and a graphical operations dashboard for monitoring and recovery.
MSP/MSSP Program
A partner program specifically designed for managed service providers and managed security service providers to deliver Kiteworks secure data exchange capabilities to their customers. The program is listed alongside reseller and technology partner programs as a distinct channel engagement model. Specific program details are referenced on the site navigation as a distinct partner category.
Premium Support
A technical support service offering 24/7 assistance for Kiteworks platform customers, accessible via phone, email, and support portal. Support is available across multiple geographies with dedicated phone numbers for North America, International, Australia, Germany, Israel, New Zealand, Singapore, and the UK. The service is designed to provide timely responses to technical issues and platform questions.
SafeEDIT (Next-gen DRM)
A next-generation digital rights management solution that streams an editable video rendition of source files to authorized external users' browsers while keeping the original file locked inside the Kiteworks secure enclave, so no file is ever transferred or data leaves the owner's environment. External collaborators edit in native applications such as Word, AutoCAD, SOLIDWORKS, and Photoshop with full interactivity, while the organization retains complete custody, instant access revocation capability, and comprehensive audit logging of every user action. Any file type that runs on a Windows application is supported, with configurable watermarking, clipboard controls, and file locking.
Secure Boardroom Communications
A secure communications solution for board of directors where emails and file attachments are encrypted in transit and at rest with access controlled by granular access privileges and MFA so only authenticated users can read the data. Automatic notifications of file uploads, downloads, new versions, and comments keep board members informed, and all file activity is recorded and tracked providing a comprehensive audit trail. Files are easily uploaded and downloaded from the secure environment.
Secure Data Forms
A web forms solution for collecting sensitive data inside a zero-trust architecture with FedRAMP High-ready and FIPS 140-3 Level 1 validated encryption, RBAC/ABAC access controls, and regional data residency options for DACH, Benelux, Canada, and other jurisdictions. Submitted data is automatically validated, governed, and logged with real-time compliance monitoring across HIPAA, GDPR, SOX, and PCI DSS, and can be deployed on-premises, private, hybrid, or FedRAMP virtual private cloud. Submissions flow automatically into downstream workflows through integrated file sharing, email, MFT, SFTP, and APIs under the same governance policies.
Secure File Sharing and Collaboration
A secure file sharing solution that provides a central location to set, enforce, and track all file activity with granular access privileges ranging from view-only to edit. Files and folders are accessible from any location or device, with Microsoft Office integration for real-time collaborative editing of Word, Excel, and PowerPoint files. All file activity is tracked in immutable audit logs, with FIPS 140-3 Level 1 validated encryption for data in transit and at rest.
Secure MCP Server
A Model Context Protocol integration that lets large language models and AI agents securely access a governed data environment with classification-aware retrieval. The MCP Server enforces RBAC and ABAC governance on every AI operation, granting agents scoped, least-privilege access aligned with regulatory compliance requirements. It uses OAuth 2.0 authentication and comprehensive audit logging to ensure every AI agent data interaction is authenticated, policy-governed, and documented.
SFTP Server
A modern replacement for legacy SFTP servers that allows external parties to access shared folders via SFTP protocol with full authentication, encryption, and audit logging. It provides enhanced security controls and centralized governance under the same data policy engine and unified audit log as other Kiteworks channels. The solution eliminates the security gaps and management overhead associated with traditional legacy SFTP implementations.
Virtual Data Rooms
Secure collaboration spaces that empower teams to conduct deals and sensitive engagements with the highest levels of security and compliance, enforcing third-party user identity, multi-factor authentication, and file and folder expiration. Files are encrypted in transit and at rest, and all file activity including uploads, downloads, and shares is recorded in immutable audit logs for reporting and analytics. Access is controlled by granular access privileges to enable complete confidentiality for M&A, fundraising, and board communications.
Considering Kiteworks?
Our team will work with you to determine if Kiteworks is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.