Immuta on Tuesday introduced new data provisioning capabilities designed to better enable customers to access and deliver governed data to agents and other applications.
Data provisioning is the process of making data available precisely when and where it is needed. It includes collecting data from disparate sources, preparing and transforming the data so it can be consumed, and delivering it to its proper target destination.
Immuta’s new features, which include automation capabilities, aim to reduce what has historically been a weeks-long, manual provisioning process down to minutes.
They include Guardrail Policies to put governance measures in place that automate access to data, Policy Exception Workflow to enable users to ask for exceptions through a structured workflow rather than ad hoc requests, and Multi-Approver Setup to help data owners and governance teams automate data provisioning policies.
Guardrail Policies and Multi-Approver Setup are generally available while Policy Exceptions Workflow is in public preview. In addition, Immuta made Marketplace, a governed hub where users can discover and provision data assets, generally available.
Given that real-time decision-making is crucial to many businesses, and agents need diverse real-time data to properly behave, Immuta’s new features are “highly significant” for the vendor’s users, according to Stephen Catanzano, an analyst at Omdia, a division of Informa TechTarget.
“The combination of guardrails, exception handling and multi-approver capabilities with the Marketplace creates a complete end-to-end system that can handle policy-driven automatic approvals and request-based access in one platform, which is particularly crucial as AI exponentially multiplies data access requests,” he said.
Based in Boston, Immuta is a data governance and security vendor that competes with specialists including Satori and Privacera and broader-based data management vendors with governance capabilities such as Alation, Collibra and Informatica.
Powering provisioning
Historically, data-driven decision-making had plenty of lag time. Data was often controlled by a central team, and requests for reports and other data assets generally took weeks — sometimes months — to fulfill.
The combination of guardrails, exception handling and multi-approver capabilities with the Marketplace creates a complete end-to-end system that can handle policy-driven automatic approvals and request-based access in one platform. Stephen CatanzanoAnalyst, Omdia
The rise of self-service analytics around 2010 changed that to some degree, but weekly, monthly and quarterly reports were still the basis for many of the insights that led to decisions and actions.
Worldwide events beginning in 2020 such as the COVID-19 pandemic, the war in Ukraine, repeated supply chain disruptions and economic uncertainty radically altered the speed that decisions had to be made, placing greater emphasis on real-time data. Surging interest in AI, sparked by OpenAI’s November 2022 launch of ChatGPT, has only heightened the emphasis on real-time decision making.
Reducing what had been a time-consuming provisioning process down to minutes is therefore crucial, according to William McKnight, president of McKnight Consulting.
“Immuta’s Marketplace and structured workflows accelerate secure data provisioning at enterprise scale, eliminating the bottleneck that slows analytics and AI initiatives,” he said. “By automating fine-grained access controls across cloud platforms, Immuta enables faster data use by both human users and AI agents without compromising security.”
Perhaps the most valuable new feature is Guardrail Policies, McKnight continued.
“While the Marketplace delivers the speed, the Guardrail Policies stand out as crucial for governance teams because they ensure the integrity and safety of the system, allowing the rapid speed afforded by the Marketplace to be sustainable at scale,” he said.
Catanzano likewise called out Guardrail Policies. But while McKnight noted that the feature fosters speed and scale, Catanzano highlighted its preventative nature, particularly with AI agents capable of taking on tasks without human involvement.
Beyond the individual features that comprise Immuta’s improved data provisioning capabilities, the suite is designed to integrate with data catalogs and other governance platforms to further speed and simplify the provisioning process.
The rise of generative AI (GenAI) and AI agents provided Immuta with the impetus for developing its new capabilities, according to Matt Carroll, the vendor’s CEO. GenAI has enabled more people within organizations to work with data, he noted. However, in doing so, it has also exposed enterprises to a greater risk of data breaches and regulatory noncompliance.
“With so many new data consumers, the challenge becomes how to make data discoverable and accessible while still enforcing the right policies and controls,” Carroll said. “That’s what led us to develop data provisioning workflows.”
While valuable for Immuta’s users, whether the new data provisioning capabilities can help the vendor stand out from its competitors remains to be seen, according to Catanzano. Immuta’s new features comprise a unified data provisioning workflow that automates processes that previously took significant time, but vendors such as Informatica also provide data provisioning capabilities, he noted.
Where Immuta could have an advantage is speed.
“Immuta’s focus on AI-scale access requests may differentiate it from traditional governance tools that weren’t built for dynamic, high-volume environments,” Catanzano said. “But … I don’t think it’s a major differentiator. All the major players moving and governing data have a strong story here, but with some nuances.”
McKnight similarly mentioned speed as a way Immuta might separate from other vendors. While many provisioning platforms show users what data exists and allow them to request access, Immuta’s automates secure provisioning.
“Immuta automatically applies the right policies — masking, filtering, anonymization — at query time across cloud platforms,” McKnight said. “It’s the difference between discovering data and actually getting governed access to it in minutes [rather than] weeks.”
Next steps
Looking ahead, Immuta is planning to add native integrations with data warehouses and database platforms to make it easy for customers to access data where it lives, according to Carroll. In addition, the vendor plans to deepen partnerships with data catalogs, add conversational interfaces to simplify using its tools and launch its Agentic Data Governor, he continued.
“Thematically, 2025 and early 2026 are about expanding connectivity, embedding Immuta wherever data is discovered, bringing governance into conversational AI, introducing native AI to accelerate access and decision-making and delivering intelligent, customer-specific governance agents that redefine what secure, automated data provisioning looks like,” Carroll said.
Focusing on AI governance capabilities with tools such as the Agentic Data Governor is wise, according to McKnight, who noted that while the new data provisioning tools advance one part of Immuta’s platform, others also need improvement.
“The company must advance its GenAI governance by building dynamic prompt and output controls that detect and protect sensitive data in [large language model] interactions in real time,” McKnight said.
In addition, adding native connectors to broaden its data integration capabilities and evolving from alert-based monitoring of policy violations to automated remediation are ways Immuta could better serve its users, he continued.
Catanzano, meanwhile, suggested that Immuta add AI-powered capabilities to its provisioning suite, among other ways the vendor could potentially advance its offerings.
“Immuta could expand into AI-native features like intelligent policy recommendations based on usage patterns or real-time data quality scoring within the provisioning workflow to ensure AI systems get not just governed data, but high-quality governed data automatically,” he said.
Eric Avidon is a senior news writer for Informa TechTarget and a journalist with more than 25 years of experience. He covers analytics and data management.
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept All”, you consent to the use of ALL the cookies. However, you may visit "Cookie Settings" to provide a controlled consent.
This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Manage your privacy
To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.