Kiteworks Acquires Bonfy.AI to Enhance Real-Time Data Security
Kiteworks buys Bonfy.AI to close the gap between knowing where sensitive data lives and controlling what happens to it when AI systems or people move it.
Key points
- Kiteworks acquired Bonfy.AI to extend real-time policy enforcement across human and AI data exchanges.
- The acquisition cost is estimated at tens of millions of dollars, according to CTech.
- Bonfy.AI, which raised $9.5 million in seed funding when it came out of stealth in June 2025, applies security policies before a data transfer completes.
- This is the eighth Kiteworks acquisition in five years.
What is the significance of this acquisition?
Kiteworks has bought Bonfy.AI to govern sensitive data at the moment it moves, whether the sender is a person or an AI agent. Bonfy.AI was founded in early 2024 by Gidi Cohen and Danny Kibel. Its platform classifies data inline at runtime and applies security rules before any transfer finishes, covering email, file sharing, SaaS applications and autonomous agents.
Enterprises typically inventory their sensitive data well. What they lack is control over what happens to that data when it's actually used or shared. Bonfy's approach closes that gap. The difference from older methods: decisions are made on genuine context, not pattern matching, and they're logged in a way that can be shown to a regulator later.
"Knowing where sensitive data lives is part of the equation, but deciding, in the instant data leaves, whether it should leave, and being able to prove that decision to a regulator months later is a big gap we're closing," said Tim Freestone, Kiteworks chief strategy officer, commenting to the original outlet.
How will this affect data security for companies?
Integrating Bonfy's technology lets Kiteworks apply a single policy model to people, machines and systems alike. That's the practical value here: one enforcement layer, not separate products running side by side.
Amit Toren, Kiteworks' chief business officer, said the acquisition expands the firm's ability to deliver control over private data as AI use grows across the enterprise.
| Company | Founded | Estimated Cost |
|---|---|---|
| Bonfy.AI | Early 2024 | Tens of millions |
Watch how quickly Kiteworks folds this into its existing compliance and audit workflows. Provable compliance at decision time is the claim; whether customers can actually surface that proof during a regulatory review is what will test it.
Common questions
How does this technology work?
Bonfy's platform reads the full context of a data exchange while it's in progress and applies security policies before the transfer completes. Sensitive data is protected during the exchange itself, not flagged in a report afterward.
What should businesses consider?
Real-time classification is only useful if the policy model behind it is current. Companies adopting this kind of tooling need governance processes that keep policies aligned with how their AI systems actually behave.
Is there a benefit for AI systems?
Yes. Autonomous agents and AI assistants come under the same policy enforcement as human workflows, so there's no separate security gap just because a machine is doing the transferring.
