Immuta

That’s a wrap on October. It was a busy month for the Immuta team, with conversations taking us from London to New York and Paris to San Francisco. We joined the @Teradata World Tour in London, the CDO Leadership Summit in New York, @Snowflake World Tour Paris, and AI + Data Afterhours with @ServiceNow during #SFTechWeek. Different events, different audiences, but plenty of shared questions around how organizations are approaching AI, data access, and governance.

What happens when an AI agent uses a shared, overprovisioned credential? You lose the relationship between the person asking the question and the identity actually accessing the data. As Claude Zwicker explains, that could mean a finance analyst using a “chat with your data” interface to access information they would never normally be permitted to see.

Immuta is extending its authorization layer into Teradata AI Studio. As AI agents move from pilots into daily enterprise workflows, the question is no longer just whether an agent can access data, but what it should be allowed to do, and on whose behalf. Read more about the integration: ow.ly/AlYB51029Kr

11 requests a week for a person. 1,150 an hour for an AI agent. The need-to-know principle still matters. But the way we apply it needs to change. Read Part 1 of our new series on restoring need-to-know for the agentic enterprise. ow.ly/EWkH5101MMi

Inference and authorization are not the same thing. Our latest resource explores the difference between inference and authorization, and why the distinction matters for governed AI data access. Read more: ow.ly/3GTs51012AL

Delegation, data-plane enforcement, and just-in-time access. Our latest whitepaper explores how these principles can help organizations govern AI agents as distinct identities while preserving the context of the users they act for. Read the whitepaper: ow.ly/R6q15100yK4

Manual governance hits a ceiling. And it can happen sooner than you think. Too little access can leave people waiting for the data they need to do their jobs. Too much access can create unnecessary risk for the organization.

How should AI agents access enterprise data? There are a few ways to approach it. Immuta CTO Steve Touw walks through all three approaches and explains why just-in-time access vending provides a stronger foundation for agentic data access.

Paris was a good one. It was great to connect with the Snowflake community and hear how organizations are approaching AI agents and governed data access.

Join Immuta at Teradata World Tour London to explore how the data authorization layer for the agentic enterprise can help teams apply policy-driven, temporary, and task-bounded access for humans and AI agents. Book a meeting here: ow.ly/tWp550ZYvBQ

AI agents shouldn’t have access by default. When an AI agent is compromised, any standing permissions it holds could give an attacker access to data they shouldn’t have. A better approach is zero standing privileges.

In our latest article, Immuta CTO Steve Touw explores why human-centric access controls will never work for AI at scale, and what a new authorization model needs to look like. Read the full article: ow.ly/CM6G50ZXGE0

Can your team explain every AI agent data request - who made it, what they asked for, and which policy allowed or denied access? If not, you’re missing an authorization layer. ow.ly/UU4450ZXg1T

For CDOs, the challenge is no longer simply how to make data available. It’s how to make it usable for AI while maintaining the governance, security, and accountability the business needs. That’s what we’ll be exploring at the CDO Summit. ow.ly/F9a350ZXfWJ

Sam Carroll shares his thoughts on AI’s growing intelligence. Effective access controls on data platforms need to be implemented to prevent AI agents from impersonating users or gaining autonomy over data you never thought they could access.

A great evening of conversations at AI + Data Afterhours. It was great to bring the @ServiceNow and Immuta communities together in San Francisco for an evening focused on what’s actually happening across AI, data, security, and governance.

Meet with us at Snowflake World Tour Paris on October 15th. We’ll be talking about what comes next, policy-driven, temporary, and task-bounded access that complements Snowflake’s native security foundation. Book time here: ow.ly/BxVN50ZVq5n

Every request for data needs permission. Now there are millions of requests. At Teradata London 2026, the Immuta team will be exploring how organizations can enable AI innovation while maintaining control, accountability, and governance. ow.ly/x79U50ZUxUz

Your fastest-growing data consumer isn’t human. The challenge is that data access models were built for people, not autonomous systems. Read our CEO, Matthew Carroll’s, blog to explore this: ow.ly/ZhZw50ZTyYb

It was great to spend time with the Snowflake community in Berlin discussing how organizations are approaching this shift and the role governed authorization plays in building trust in AI.