Skyflow has launched Skyflow for Glean, a data security and governance layer designed to control sensitive information as it moves through enterprise AI search and agent workflows.
The offering is aimed at organisations using enterprise search systems to bring together information from sources such as customer relationship management systems, SaaS applications, data lakes and internal wikis. Skyflow said its approach is to apply controls not only to stored data, but also when information is retrieved and used as context by AI systems.
The company said the product addresses a challenge that emerges when enterprise AI search expands beyond conventional document retrieval. AI systems can use underlying information to generate answers, summaries and reasoning, potentially exposing sensitive fields even when users have permission to access the broader documents.
Skyflow for Glean operates at two stages. During ingestion, the platform detects and tokenises sensitive information before content is added to the search index and embeddings. During retrieval and agent execution, it applies policies for masking, rehydration and context filtering.
The approach is intended to complement Glean’s existing permissions-based access controls by adding controls at the individual data-field level.
Kearney, a global management consulting firm, is cited as an early user. The company deployed Glean across thousands of consultants while managing access to client information subject to confidentiality requirements. According to Skyflow, its platform is used to enforce customer-specific isolation and maintain an audit trail.
“We don’t want to be in the data sanitization business,” said Mark Johnson, Partner and Chief Information and Digital Officer at Kearney. “Skyflow gave us per-field encryption, runtime policies, and customer-specific isolation as a platform – not a project.”
Anshu Sharma, co-founder and CEO of Skyflow, said the focus was on controlling data at the point where it is accessed by search and AI systems. “Every search and every agent action touches your most sensitive records,” he said. “Protecting that moment matters as much as protecting the storage behind it.”
Skyflow said the controls are intended to allow organisations to make broader use of enterprise information while limiting the exposure of sensitive data in AI-generated answers, summaries and agent interactions. The company also said the platform supports regional data requirements including GDPR, DPDP and HIPAA, with access activity recorded for auditing.