Kiteworks
Secure file transfer and data governance platform for regulated banks, law firms, and agencies.
On the record
Checkpoint: EU regulatory scrutiny of Zivver acquisition's CLOUD Act exposure, following Follow the Money coverage
The call
Kiteworks holds regulated customers through certifications and lock-in while a EU sovereignty scandal and Microsoft's bundled governance push sit unresolved.
Kiteworks sells software that helps banks, law firms, and other regulated companies manage and protect sensitive documents and communications. It is hard to replace because it has government certifications, can run on companies' own servers rather than in the cloud, and is deeply woven into customer workflows. However, Microsoft is building similar governance tools into Office 365, and right now Kiteworks faces a bigger immediate threat: its recent acquisition of a Dutch competitor called Zivver has triggered concerns in Europe about U.S. government data access under American law, which could cause EU customers (especially hospitals and government agencies) to leave and damage the company's reputation in its fastest-growing region.
Why
01
AI pressure: None apparent. No AI agent replaces regulated file governance yet; generative AI use inside enterprises mostly adds to Kiteworks' compliance workload. Could AI do the core job? Unlikely.
02
Bigger players: Microsoft (Purview + M365 + Copilot governance). Purview already ships governance and compliance tooling bundled into M365, competing for the same regulated-enterprise budget line. Could a giant copy it? Probably.
03
What protects it. FedRAMP High and FIPS 140-3 certifications plus on-prem/private-cloud deployment that hyperscalers can't easily match for regulated data.
What would change this call
EU regulator or Dutch authority formally reviews Zivver over CLOUD Act/Unit-8200 concerns within 12 months. Would show the acquisition is actively damaging Kiteworks' EU sovereignty positioning.
A named EU public-sector or healthcare customer publicly drops Kiteworks or Zivver by mid-2026. Would confirm real customer attrition tied to the reputational crisis, not just press coverage.
Kiteworks raises a new funding round or completes a secondary sale by mid-2026. Flat or down valuation would confirm revenue growth is weaker than the $1B mark implies.
A named EU public-sector or healthcare customer publicly drops Kiteworks or Zivver by mid-2026. Would confirm real customer attrition tied to the reputational crisis, not just press coverage.
Kiteworks raises a new funding round or completes a secondary sale by mid-2026. Flat or down valuation would confirm revenue growth is weaker than the $1B mark implies.
Key numbers
- 3,650+ regulated enterprises and agencies use Kiteworks
- ~25% of top 100 global banks are customers
- FedRAMP High Ready status achieved for Secure Gov Cloud
Named risks
- EU reputational and regulatory fallout from Zivver acquisition over Unit 8200 ties and CLOUD Act exposure since Oct 2025.
- Unverified revenue figures and a secondary-heavy Aug 2024 funding round inconsistent with a $1B growth narrative.
- Microsoft bundling native Purview/Copilot AI governance could erode Kiteworks differentiation in mid-market.
- Modest 13% YoY headcount growth through June 2026 suggests slower expansion than valuation implies.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft | gaining on | Purview and M365/Copilot bundling threatens native governance overlap with Kiteworks by mid-2026 |
| Zivver | contesting | Kiteworks acquired Zivver June 17, 2025 to expand EU footprint despite subsequent reputational backlash |
| Box | contesting | Named as file-sharing rival in Kiteworks' own vendor comparison content dated 2025-12-23 |
| Axway | contesting | Direct managed file transfer competitor compared via G2 third-party reviews |
Questions people ask
- Is Kiteworks profitable in 2026?
- TechCrunch reported on August 14, 2024 that Kiteworks had been profitable for the two years prior to its $456M raise at a $1B+ valuation, serving 100M+ users across 3,650+ enterprises and government agencies. No later reporting has contradicted this profitability claim.
- Who owns Kiteworks?
- Kiteworks is privately held. Its August 14, 2024 funding round of $456M, led by Insight Partners and Sixth Street Growth, valued it over $1B, but much of that round was secondary shares used to buy out long-time early investors rather than fresh growth capital.
- Could AI replace Kiteworks?
- Unlikely. Kiteworks sells governance and audit plumbing around AI agents rather than a replaceable generative capability. It launched a Secure MCP Server for Claude, Copilot, Agentforce and GPT-4o at Gartner SRM 2026 (announced June 17, 2026), so AI adoption drives demand for it rather than displacing it.
- Who is Kiteworks' biggest competitor?
- Microsoft, via Purview and M365 compliance bundling with Copilot, is the most structurally significant incumbent threat since it could bundle equivalent governance features natively. Named direct rivals include Box, Egnyte, Axway, and Zivver, which Kiteworks itself acquired in June 2025.
- Has Kiteworks had layoffs?
- No layoff events appear in available tracking. Crustdata data shows Kiteworks headcount grew steadily from about 204 employees in July 2021 to roughly 375 by June 2026, a modest but positive 13% year-over-year growth rate.
- What is the Kiteworks Zivver controversy about?
- Dutch outlet Follow the Money reported on October 27, 2025 that Kiteworks leadership has ties to Israel's Unit 8200 and flagged U.S. CLOUD Act exposure risk for European health and government data handled through Zivver, which Kiteworks acquired June 17, 2025 with about 11,000 organizational customers.
Timeline
- 2026-06-17Launched Secure MCP Server and Innovators in AI Program for Claude, Copilot, Agentforce at Gartner SRM 2026
- 2026-03-26Launched Compliant AI, a data-layer governance product for AI agents
- 2026-01-21Launched AI-powered Channel First partner training and certification program
- 2025-12-14Continued press coverage of Zivver/Unit 8200 ties and CLOUD Act exposure concerns
- 2025-10-27Follow the Money reported Kiteworks leadership ties to Unit 8200 and CLOUD Act risk via Zivver
- 2025-06-17Acquired Zivver, Dutch secure-email firm with about 11,000 organizational customers
- 2025-03-17Achieved FedRAMP High Ready status and FIPS 140-3 cryptographic validation
- 2024-09Acquired 123FormBuilder, a Romanian web-forms company
- 2024-08-14Raised $456M at over $1B valuation led by Insight Partners and Sixth Street Growth
- 2021-10Rebranded from Accellion to Kiteworks
Revision history
29 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data (2024-08-14)
- The Israeli team that led cyber company Kiteworks to a $1B valuation and $456M funding round (2024-08-14)
- Kiteworks - Headcount, Funding & Open Jobs (2026-06-30)
- Revenue, Competitors, Alternatives
- Management and Employees List
- Kiteworks (2026-06-15)
- Kiteworks Acquires Zivver (2025-06-17)
- Europeans' health data sold to U.S. firm run by ex-Israeli spies (2025-10-27)
- Zivver...sold to a company linked to Israeli intelligence... (2025-12-14)
- Revolutionizes Secure Data Access for Enterprise AI Innovation (2025-03-17)
- Kiteworks Launches Compliant AI for AI Agent Data Governance (2026-03-26)
- Kiteworks Launches Innovators in AI Program at Gartner SRM 2026 (2026-06-17)