Unified DSPM and GRC for Multi-Cloud Data Security and Continuous Compliance

Ancile is a Durham, North Carolina software company building a data security posture management platform for organizations that need to discover, classify, monitor, and govern sensitive data across cloud and SaaS environments. Founded by Han Kanthi, the company targets security and compliance teams that have lost track of where regulated data lives once it spreads across cloud accounts, infrastructure, and data repositories. Its go-to-market centers on regulated industries, including FinTech, InsurTech, healthcare, and legal services, where data protection, regulatory obligations, and customer trust are tightly coupled.

The platform connects to AWS, Microsoft Azure, Google Cloud, and Microsoft 365, giving teams a centralized view of their sensitive data landscape. It discovers and inventories data stores, applies classification and pattern-recognition techniques to identify sensitive content, covering PII, cardholder data, credentials and access keys, and protected health information, then evaluates how that data is accessed and exposed. A data detection and response layer monitors access and usage patterns continuously, surfacing anomalous activity, excessive exposure, orphaned data, and sprawl.

What distinguishes the offering is that DSPM and governance, risk, and compliance capabilities live in one unified platform, so data security findings feed compliance assessments, evidence collection, risk management, and continuous control monitoring across more than 60 regulatory and industry frameworks, including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, SOX, and CMMC. An emphasis on explainable AI gives analysts stated context for classifications, risks, and alerts. The vendor has completed a SOC 2 Type II audit, publishes a public trust center, lists on AWS Marketplace, and has exhibited at RSAC.