Directory Data & AnalyticsData Governance & CatalogImmuta

Immuta

About Immuta

Immuta provides an authorization layer for data access. The platform applies one set of rules to decide every data request for both humans and agents. It is described as a new layer in the enterprise stack, with one policy engine governing every human, agent and data system on every request. The platform consists of four modules built on one policy engine.

Products

Policy Authoring & Enforcement: Compiles plain-language rules into controls enforced inside data infrastructure.
Request Workflows & Exceptions: Handles routine access requests automatically and routes exceptions to people for decisions.
Agentic Access: Treats each agent as a first-class identity acting on behalf of a named person, scoped to its task.
Comply: Records every access decision as it happens so compliance can be queried.

Used for

Masking patient names unless a masking exception is granted

Who it is for

Banks use Immuta to run their data access.
Pharmaceutical companies use Immuta to run their data access.
Insurers use Immuta to run their data access.
Government agencies use Immuta to run their data access.

From Immuta's own website, read 2026-10-23. How we build listings.

How to evaluate Data Governance & Catalog

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Immuta. The category covers two kinds of product, so both frameworks are here. Most buyers need one of them.

Data Catalog & Metadata Management

25%

Connector Coverage & Metadata Ingestion

Native connectors for your actual sources — warehouses, lakehouses, BI tools, ETL/ELT, streaming, NoSQL, files, and the awkward homegrown and SaaS systems; automated scanning and incremental crawl; depth of harvested metadata (schemas, profiles, usage); and how hard a custom connector is to build

20%

Lineage & Impact Analysis

Automated column-level lineage parsed from SQL, dbt, Spark, and orchestration; accuracy and freshness on YOUR pipelines, not a demo dataset; cross-system lineage that survives a hop between platforms; and upstream/downstream impact analysis a team would trust before a breaking change

20%

Active Metadata & AI Automation

Usage- and popularity-driven ranking from query logs; ML-assisted description generation, PII/PHI classification, and anomaly or staleness flags; metadata that writes back into BI tools, IDEs, and chat; and the ability to serve trusted context to retrieval/agentic systems (e.g. MCP)

15%

Governance, Stewardship & Compliance

Stewardship and certification workflow, business glossary tied to physical assets, policy and access-control integration, data-contract support, and audit-ready classification and lineage for GDPR, CCPA, HIPAA, and sector regimes — without forcing a separate governance suite

10%

Adoption, Collaboration & UX

Search relevance and natural-language query for non-technical users, embedded experiences in Slack/Teams, BI tools and IDEs, crowdsourced enrichment and certification badges, and the friction of getting a first-time business user to a trusted answer

10%

Architecture, Extensibility & Deployment

Open and extensible metadata model, API and event coverage for custom workflows, SSO/RBAC and fine-grained metadata access, deployment options (SaaS, customer-managed, on-prem), and total operational burden including upgrades and scaling

Data Governance & Catalog Platforms

25%

Catalog, Lineage & Connectivity

Depth and freshness of automated metadata harvesting; column-level, end-to-end lineage parsed from SQL/ETL/BI (not hand-drawn); connector coverage across your warehouses, lakehouse, BI, SaaS, and on-prem sources; and how lineage survives transformations

20%

Active Metadata & Automation

AI-assisted classification and PII detection, auto-suggested glossary terms and descriptions, metadata that triggers actions (alerts, policy, tagging) rather than sitting passive, and open APIs that let agents and pipelines read and write metadata

20%

Stewardship & Business Usability

Business glossary and data-product workflows, steward task/approval routing, search and discovery non-technical users actually adopt, marketplace/shopping experience, and time-to-first-value for a real domain

15%

Policy, Privacy & Access Enforcement

Policy authoring tied to classifications, masking/row- and column-level controls, push-down enforcement into Snowflake/Databricks/BigQuery, audit trails, and alignment to GDPR, CCPA, and sector regimes

10%

Governance for AI & Data Quality

AI/model and agent registers, lineage from source data through training and inference, EU AI Act / NIST AI RMF mapping, and embedded or integrated data-quality rules, scoring, and observability

10%

Deployment, Scale & Ecosystem Fit

SaaS vs. self-managed options, scale across millions of assets, interoperability with lakehouse catalogs (Unity, Polaris/Horizon, Iceberg REST), identity/SSO, and total operational burden to keep it current

Other Data Governance & Catalog Vendors

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .