Kiteworks
Controlled data exchange with complete data sovereignty and unified governance for employees and AI agents.
By Kiteworks · HQ San Mateo, US · 4.3/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Regulated enterprises needing auditable control over email, file sharing, MFT, SFTP, web forms and API data exchange
- Organizations producing FedRAMP, CMMC 2.0, HIPAA, GDPR or PCI DSS audit evidence from one platform
- Security teams that must govern AI agent access to sensitive data with scoped tokens and per-action audit logs
- Enterprises with data-sovereignty mandates requiring on-premises, private-cloud, hybrid or single-tenant deployments
Ideal size: 500–10,000+ employees people · Regulated enterprise with dedicated security, compliance and IT operations teams
Not for
- SMBs wanting self-serve signup and published per-seat pricing
- Teams looking for a productivity-first cloud content suite rather than governed exchange
- Buyers unable to accommodate a virtual appliance rollout and IT involvement
Value metrics scorecard
Time-to-Value
Roughly 8–12 weeks (appliance rollout)
~60 days to first production value
Total Cost of Ownership
On request
Quote-based licensing by user count; Business Edition covers 5–500 users, Enterprise Edition is unlimited, and optional capabilities are billed as add-ons
Implementation Friction
4/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
Business Edition: 5–500 users; Enterprise Edition: unlimited users
Add-on costs
- SafeEDIT next-generation digital rights management (DRM)
- Advanced governance with content-based risk policies
- Secure managed file transfer
- Secure APIs and SCIM support
- Email Protection Gateway
- Enterprise Connect
- Secure protocol package (SFTP, SMTP)
- Salesforce and iManage plugins
- Kiteworks Premium Support
- FedRAMP authorized, IRAP and single-tenant cloud hosting options
Company & support
Who is behind Kiteworks, and how your team gets help once it is live.
Company
- Founded
- 1999 · 27 yrs in business
- Headquarters
- San Mateo, US
How you get support
- PhonePlan not stated
- EmailPlan not stated
- Live chatNot listed
- Support portal / ticketsPlan not stated
- Community forumNot listed
- Help centre / docsPlan not stated
- Dedicated account managerNot listed
- In person / on-siteNot listed
- Hours
- 24/7
- Response time
- Not stated
Support page states trained support engineers provide reliable, timely responses 24x7 via a support portal, [email protected] and regional phone lines. Kiteworks Premium Support is sold as an Enterprise add-on.
“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.
Market position
Where Kiteworks sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.
Companies on the chart 6 / 10
- Kiteworks
- Datto
- Darktrace
- Hyperproof
- Securonix
- Teramind
Add or change companies
Up to 10 companies including Kiteworks. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What Kiteworks ships in AI, and what it asks of your ecosystem.
AI features shipped
Homepage describes a Secure MCP Server for AI agents, agent identity binding to the delegating human, task-scoped delegation tokens, agent action tracking, prompt-injection protection and LLM data isolation. No customer-facing AI assistant or named model is described.
Your data & models
- Trains on your data
- Not recorded — ask the vendor
- Runs on
- Not recorded
- AI pricing
- Not recorded
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Full audit trail
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
Kiteworks is a private data network for governed exchange of sensitive content across email, file sharing, managed file transfer, SFTP, web forms and APIs. A single data policy engine, TLS 1.3/AES-256 encryption, immutable audit logs and pre-built HIPAA, CMMC, GDPR and PCI DSS reports unify employee and AI agent activity. It is FedRAMP authorized, FIPS 140-3 validated and IRAP assessed, and deploys on-premises, hybrid or single-tenant cloud with quote-based enterprise pricing.
Frequently asked questions
How is Kiteworks priced?
Kiteworks does not publish list prices. The pricing page shows a Business Edition licensed for 5 to 500 users and an Enterprise Edition with unlimited users at 'call for pricing'. Capabilities such as secure managed file transfer, DRM, secure APIs, Email Protection Gateway, plugins and Premium Support are listed as add-ons for Enterprise buyers.
What deployment options are available?
Both editions ship as a hardened virtual appliance. Enterprise adds on-premises or private-cloud hosting, Kiteworks single-tenant cloud, hybrid cloud, FedRAMP authorized hosting and IRAP hosting, which matters for buyers with data-sovereignty or air-gap requirements.
Which compliance frameworks does Kiteworks address?
The vendor states FedRAMP authorization, FIPS 140-3 validated encryption and IRAP assessment to PROTECTED level, and generates pre-built reports for HIPAA, CMMC, GDPR and PCI DSS from a unified, tamper-evident audit log. The Enterprise Edition is positioned as supporting nearly 90% of CMMC 2.0 Level 2 requirements out of the box.
How does Kiteworks govern AI agents?
Kiteworks provides a Secure MCP Server that lets LLMs reach governed data with classification-aware retrieval. Agents authenticate with scoped delegation tokens bound to a human identity, ABAC policy is evaluated on every operation, agent tokens are revocable, and agent actions are logged separately with prompt context and policy outcomes.
What support is included?
The support page states trained support engineers respond 24x7 through a support portal, [email protected] and regional phone numbers, with a knowledge base and product updates available to clients. Kiteworks Premium Support is also sold as an Enterprise add-on. The support page also describes deployment assistance for installations.
What does implementation involve?
Kiteworks describes an implementation that starts with requirements discovery and ends with going live on the new system, supported by its professional services team, and includes an overview of core administrative functions. Because it is deployed as a virtual appliance or hosted instance, budget for IT and security involvement rather than a quick self-serve setup.