CISO Tribune

Vendor comparison · 2 companies

Arexdata vs Immuta

Arexdata sells Arexdata DSPM, a data security posture management platform that helps identify sensitive data, who can access it, how it is used, and where the risks lie, including those associated with the use of AI. Immuta sells software that connects to data platforms so customers can register their data and manage access controls on that data. CISO Tribune files both under Data security posture management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Arexdata
  • Immuta
Arexdata vs Immuta: Products, Customers and Funding Compared
ArexdataArexdata sells Arexdata DSPM, a data security posture management platform that helps identify sensitive data, who can access it, how it is used, and where the risks lie, including those associated with the use of AI.arexdata.comImmutaImmuta sells software that connects to data platforms so customers can register their data and manage access controls on that data.immuta.com
What it sells
  • Arexdata DSPM[2][3]A platform for identifying sensitive data, who can access it, how it is used and where the risks lie, including those tied to AI use.
  • Govern[1][4]Writes data access policies in plain language and enforces them across connected data systems.
  • Provision[1]Manages access requests and masking exceptions, routing routine access automatically and sending genuine exceptions for a decision.
  • Comply[1]Records every access decision as it happens so compliance and audit questions can be answered quickly.
  • Agentic Data Access[1]Issues AI agents scoped, temporary credentials tied to the human they act on behalf of.
  • Immuta Detect[2]Provides continuous user and data activity monitoring across cloud data platforms for risk remediation and posture management.
Categories
Headquarters
Not stated on its pagesBoston, United States[2]
Founded
Not stated on its pages2015[2]
Ownership and funding
Not stated on its pagesPrivately held[5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetImmuta addresses organisations where AI agents request data on behalf of named people. Immuta also speaks to teams that connect data platforms and want access controls managed on the data held in them. Immuta describes a division of work in which policy answers routine requests and people own the exceptions.
Last verified
October 23, 2026November 8, 2026

Where they overlap

  • Data security posture management is the primary category of both Arexdata and Immuta.

Where they differ, field by field

  • Arexdata is also filed under Workforce AI usage security. Immuta is also filed under Identity governance and administration, Non-human identity security and Privacy management.
  • Arexdata lists Arexdata DSPM. Immuta lists Govern, Provision, Comply, Agentic Data Access and Immuta Detect.
  • Immuta is headquartered in Boston, United States.
  • Immuta was founded in 2015.
  • Immuta is privately held.

How they differ

CISO Tribune files both Arexdata and Immuta under Data security posture management as the primary category. Arexdata sells Arexdata DSPM, a single platform that identifies sensitive data, who can access it, how it is used and where the risks lie, including risks tied to AI use. Arexdata says it covers cloud, SaaS, on-premises and endpoints, and that its AI risk analytics run locally so no data leaves the customer's infrastructure.

Immuta sells four modules on one policy engine: Govern, Provision, Comply and Agentic Data Access, and a customer can adopt one and add the rest. Govern writes data access policies in plain language and enforces them across connected data systems. Agentic Data Access issues AI agents scoped, temporary credentials tied to the human they act on behalf of. Immuta also sells Immuta Detect, which monitors user and data activity across cloud data platforms.

The two overlap on activity monitoring and on access to sensitive data. Arexdata DSPM locates and classifies regulated data such as PII, PCI and PHI, and detects Shadow AI and sensitive information exposed in prompts. Immuta centers on policy that answers routine access requests, with people deciding the exceptions. Immuta is headquartered in Boston, United States, was founded in 2015 and is privately held. Immuta names banks, pharmaceutical companies, insurers and government agencies as running their data access on it.

What it sells: Arexdata

What Arexdata DSPM does[2][3]
Arexdata DSPM is one platform built for end-to-end visibility across data, users, permissions, activity, and AI. Arexdata DSPM protects information in the cloud, SaaS, on-premises, and on endpoints.

Questions about Arexdata and Immuta

What do Arexdata and Immuta sell?
Arexdata sells Arexdata DSPM. Immuta sells Govern, Provision, Comply, Agentic Data Access and Immuta Detect.
Are Arexdata and Immuta in the same category?
Yes. Data security posture management is the primary category of both on CISO Tribune.
Where are Arexdata and Immuta headquartered?
Immuta is headquartered in Boston, United States.
When were Arexdata and Immuta founded?
Immuta was founded in 2015.
Who owns Arexdata and Immuta?
Immuta is privately held.
Who are Arexdata and Immuta sold to?
Immuta addresses organisations where AI agents request data on behalf of named people.

About Arexdata

Arexdata sells Arexdata DSPM, a data security posture management platform that helps identify sensitive data, who can access it, how it is used, and where the risks lie, including those associated with the use of AI. Arexdata DSPM is one platform built for end-to-end visibility across data, users, permissions, activity, and AI. Arexdata DSPM brings data, users, permissions, activity, AI and endpoints together in a single platform.[2][3]

Arexdata DSPM identifies and classifies sensitive information so that customers know what they have, where it is, and what level of protection it requires. Arexdata DSPM locates PII, PCI, PHI, intellectual property and other regulated data, and classifies it automatically using rules and tagging. Arexdata DSPM identifies sensitive data, access points, and risks across an entire infrastructure.[2][3]

Arexdata DSPM shows who can access each piece of data and helps identify excessive, inherited, or redundant permissions. Arexdata DSPM allows customers to apply the principle of least privilege. Arexdata DSPM applies Zero-Trust and least-privilege principles with traceability.[1][2][3]

Arexdata DSPM monitors accesses, changes, and actions so customers can track who did what, when, and to which data, without relying on ad hoc audits. Arexdata DSPM monitors accesses, changes, movements and data use to investigate incidents, detect risky behavior and generate evidence.[2][3]

Arexdata DSPM can revoke permissions, launch workflows, generate alerts or run actions through a customer's SIEM, SOAR and DLP tools. Arexdata DSPM allows customers to alert, escalate, or resolve each situation, either immediately or on a set schedule. Arexdata DSPM selectively mitigates exposures, automates where appropriate, and maintains oversight of critical actions.[2][3]

Arexdata DSPM detects Shadow AI, sensitive information exposed in prompts, anomalous behavior, and activity from users, agents, and non-human entities. Arexdata DSPM monitors which AI tools are used, what data they consume, and how users and agents interact with sensitive information. Arexdata detects the presence of sensitive data in chats and alerts administrators and users to prevent data exfiltration. Arexdata DSPM runs its AI risk analytics locally, and no data leaves the customer's infrastructure.[1][2][3]

Arexdata DSPM protects information in the cloud, SaaS, on-premises, and on endpoints. Arexdata DSPM analyzes information locally so that data does not have to leave a customer's infrastructure. Arexdata DSPM adds context to each exposure according to sensitivity, access and impact.[1][2][3]

Arexdata on the record

Sources

Arexdata full record

  1. [1]arexdata.comArexdata · arexdata.com · undated page, accessed October 23, 2026 · Tier A
  2. [2]The DSPM Platform \ Data & AI Security \ ArexdataArexdata · undated page, accessed November 10, 2026 · Tier A
  3. [3]Plataforma de Seguridad del Dato y la IA \ Arexdata DSPMArexdata · undated page, accessed November 10, 2026 · Tier A

Immuta full record

  1. [1]immuta.comImmuta · immuta.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Immuta recognized as a top company on forbes annual list of americas best startup employers 2Immuta · immuta.com · published March 22, 2023 · Tier A
  3. [3]Integrations | Documentation - SaaSImmuta · undated page, accessed November 10, 2026 · Tier A
  4. [4]The Authorization Layer for Data Access | ImmutaImmuta · undated page, accessed November 10, 2026 · Tier A
  5. [5]Immuta Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.