Cloud-Native, Agentless DSPM for Multi-Cloud Data Security and Compliance

Ancile is a Durham, North Carolina software company building a data security posture management platform for organizations running sensitive workloads across multi-cloud environments. Founded by Han Kanthi, the company targets security and compliance teams that have lost track of where regulated data lives once it spreads across cloud accounts, SaaS applications, and machine learning systems. Recent positioning leans heavily toward FinTech and InsureTech buyers, where regulatory exposure and customer trust obligations are sharpest and audit cycles are relentless.

The platform deploys agentless, connecting directly to AWS and Azure accounts rather than requiring software installed on hosts or changes to existing infrastructure. From there it scans data stores to build an inventory, applies machine learning and pattern recognition to classify content by sensitivity, covering PII, cardholder data, access keys, and protected health information, then maps the access paths reaching each store. A detection and response layer monitors access patterns continuously, surfacing anomalous behavior, orphaned data, and sprawl.

What distinguishes the offering is pairing discovery with a governance, risk, and compliance module in a single product, so classification findings feed evidence collection and continuous control monitoring across more than 60 frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, SOX, and CMMC. An emphasis on explainable AI gives analysts stated justifications for alerts. The vendor completed a SOC 2 Type I audit, publishes a public trust center, lists on AWS Marketplace, and has exhibited at RSAC.