Data governance & privacy
Israeli vendor whose platform maps enterprise content into a policy-aware knowledge graph, tests what enterprise LLM assistants will reveal, and adjusts access so answers respect need-to-know. Evidence comes from vendor product pages rather than technical documentation, and enforcement examples centre on Microsoft 365 Copilot content.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Data governance & privacy · Agent identity & access · Runtime authorization & controls
Useful conversation with: CISO, IAM manager, Data governance lead.
Demonstrate how Knostic detects that a Copilot answer exposed salary data to a user without need-to-know, and show the control change it applies.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
A policy-aware knowledge graph evaluates whether information should be surfaced by checking permissions, Microsoft Purview labels and custom rules.
Limit: Product page, not documentation; does not describe how label and permission data are ingested or refreshed.
Vendor claim
The platform identifies overexposed information reachable through enterprise LLMs and flags overshared content so access controls can be adjusted before AI surfaces it.
Limit: No independent measurement of detection coverage; sources do not state which LLM assistants beyond Microsoft 365 Copilot are supported for enforcement.
Vendor claim
Offers a Copilot Readiness Assessment that uses prompts built on a corpus of sensitive business topics to discover overshared content for specific user profiles.
Limit: Efficiency figures cited on the page are vendor-reported and unverified.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction