Kiteworks, Reco team up on AI agent governance

Kiteworks and Reco announced a strategic partnership on Aug. 4, 2026 to help enterprises identify AI agent risk and enforce data protection under one policy. The alliance aims to close a growing gap between agent visibility and governance as AI tools spread faster than security teams can review them.

Why it matters: - Enterprises are adopting AI agents faster than security teams can review and govern them. - The partnership is designed to connect agent discovery with real-time data enforcement under one audited policy. - Regulated industries get a clearer path to audit-ready evidence across identity discovery and the actual data event.

What happened: - Kiteworks announced a strategic partnership with Reco on Aug. 4, 2026. - The companies said the alliance gives enterprises visibility and control across their agent and app ecosystem. - The partnership is meant to help organizations govern what AI agents can access, edit, and exchange. - Kiteworks is highlighting the partnership at AI4 2026 in Las Vegas, where Craig Pfister will present on Aug. 5. - Reco is also exhibiting at Black Hat USA.

The details: - Reco continuously discovers and maps SaaS applications, human identities, non-human identities, and AI agents across an enterprise. - Reco surfaces sprawl, misconfiguration, and over-permissioned access. - That identity and risk intelligence is designed to feed the Kiteworks control plane. - The Kiteworks control plane governs access, editing, sharing, and exchange of sensitive data across email, file sharing, APIs, and AI agent workflows. - Kiteworks Data Policy Engine can apply view-only access, SafeEDIT possessionless editing, encryption, or a block in real time. - Kiteworks Secure MCP Server extends the same governance to AI agents built on the Model Context Protocol. - The same policy, encryption, and audit trail apply to both agents and human users. - Kiteworks said its platform is FedRAMP High In Process, FedRAMP Moderate Authorized, FIPS 140-3, and maps to HIPAA, CMMC 2.0, GDPR, and PCI DSS. - Kiteworks said the partnership gives customers audit-ready evidence spanning identity discovery through the actual data event, not just a risk score. - Kiteworks research found fewer than 31% of organizations have deployed any AI containment control. - The same research found 65% discovered employees using unapproved AI tools with organizational data in the past year. - Fewer than half responded by deploying technical controls to prevent it from happening again.

Between the lines: - The partnership suggests security vendors are shifting from visibility-only tools to end-to-end governance. - The emphasis on enforcement reflects a broader concern that knowing an agent exists is not enough if security teams cannot control its actions. - The compliance angle makes the deal more relevant for buyers in healthcare, financial services, government, and other regulated sectors.

What's next: - Kiteworks and Reco will push the partnership to enterprise buyers looking for a single control layer for human and agentic AI activity. - Kiteworks will continue presenting its compliant AI message at AI4 2026. - Buyers can download the solution brief for more information here.

The bottom line: - The alliance aims to turn AI agent visibility into enforceable data governance before agent sprawl creates more risk than security teams can contain.