- Home
- Cloud Encryption Software
- Confidencial
Confidencial
Menlo Park, California, United States
What it is
Confidencial is a data-protection platform that applies controls to sensitive information at the field, paragraph, or cell level. Its selective encryption can protect particular fields while leaving non-sensitive document content readable. Discover scans data environments and classifies sensitive fields across more than 40 file types. Shield can encrypt, tokenize, redact, delete, or archive data according to policy. AI Guard is designed for RAG, fine-tuning, and long-context model workflows, using sensitive-field tokenization and output filtering. Exchange supports protected file sending, requests, and signatures, with access policies, activity tracking, and revocation. It supports transfers up to 1 TB per send, and external recipients can use a limited portal without an account or installation at no cost to them. Deployment options include hosted, hybrid, and self-hosted, including on-premises and air-gapped setups. Encryption keys are held in a customer key management service such as AWS KMS or Azure Key Vault. Listed integrations include AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview. Pricing is on request.
For and against
For
- Protects selected data while leaving other content readable
- Classifies sensitive fields across more than 40 file types
- Exchange supports transfers up to 1 TB per send
- Offers hosted, hybrid, and self-hosted deployment
- External recipients need no account or installation
Against
- Pricing is available on request
- Self-hosted deployment may require cloud or on-premises setup
The verdict
Confidencial combines sensitive-field controls with discovery, policy-based data actions, AI workflow protection, and protected file exchange. Its deployment and key-management options are relevant for organizations with specific infrastructure and data-control requirements; pricing requires contacting the company.
Who it suits
Confidencial suits organizations handling sensitive data, including legal, pharma and life sciences, private equity, insurance, financial services, and technology teams. It may fit groups seeking self-hosted or hybrid deployment and customer-controlled key management.
Plans and prices
Enterprise
Pricing available by contacting Confidencial for a demo
Read 8 Oct 2026 · confidencial.io
On the record
- AI workflows
- AI Guard is described as protecting RAG, fine-tuning, and long-context model workflows through sensitive-field tokenization and output filtering.confidencial.io · read 8 Oct 2026
- Audience
- The site names legal, pharma and life sciences, private equity, insurance, financial services, and technology as industries it serves.confidencial.io · read 8 Oct 2026
- Data actions
- Shield can encrypt, tokenize, redact, delete, or archive data according to policy.confidencial.io · read 8 Oct 2026
- Data retention
- For a data assessment, the company says it collects file and folder names and summary counts, and deletes the assessment database within ten business days after the scan.confidencial.io · read 8 Oct 2026
- Deployment
- Confidencial offers self-hosted, hybrid, and hosted deployment; self-hosted supports cloud or on-premises environments and air-gapped setups.confidencial.io · read 8 Oct 2026
- Discovery
- Discover scans data environments and classifies sensitive fields across more than 40 file types.confidencial.io · read 8 Oct 2026
- Document exchange
- Exchange supports sending, requesting, and signing protected files, with access policies, activity tracking, and revocation.confidencial.io · read 8 Oct 2026
- Exchange limit
- Exchange supports transfers up to 1 TB per send and more than 40 file types.confidencial.io · read 8 Oct 2026
- Integrations
- The site lists AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview integrations.confidencial.io · read 8 Oct 2026
- Key management
- Encryption keys are generated and held in the customer’s key management service, including AWS KMS and Azure Key Vault.confidencial.io · read 8 Oct 2026
- Recipient access
- External Exchange recipients can use a limited portal without an account or installation, at no cost to them.confidencial.io · read 8 Oct 2026
- Security assessments
- The security page lists ISO/IEC 27001:2022 certification, SOC 2 Type II attestation, PCI DSS assessment, HIPAA assessment, and annual independent penetration testing.confidencial.io · read 8 Oct 2026
- Selective protection
- Its selective encryption leaves non-sensitive content readable while protecting sensitive fields inside a document.confidencial.io · read 8 Oct 2026
- What it does
- Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data.confidencial.io · read 8 Oct 2026
