What Redactive does

Redactive is an Australian enterprise AI security company founded in 2023 and headquartered in Melbourne that developed an AI-native data security platform for organizations deploying generative AI at scale. Its platform addresses two problems: misconfigured permissions on unstructured enterprise data (which traditional DSPM and identity tools fail to detect at the granularity at which LLMs actually process information), and shadow AI usage where employees paste sensitive data into unauthorized AI tools such as ChatGPT Free. The product suite consists of Permissions Assurance, which uses semantic AI analysis to identify and remediate overly accessible documents and chunks across knowledge bases such as SharePoint and Confluence, and Prompt Security, a browser-level DLP solution that intercepts traffic to unauthorized AI applications.

The platform integrates with enterprise data sources and AI infrastructure including Amazon Bedrock, Microsoft Copilot, Google Cloud, and SharePoint, and is distributed through direct enterprise sales, the AWS and GCP Marketplaces, and system integrator partnerships (Thoughtworks for implementation). Redactive holds ISO 27001 certification and targets large regulated organizations—primarily in financial services, fintech, and government—with named customers including PEXA (a $2.5bn digital property exchange), HESTA (a healthcare superannuation fund), and an unnamed multi-billion dollar pension fund. The company operates a quote-based subscription SaaS model with monthly billing.

Redactive raised $11.5 million AUD in seed funding in July 2024 from Blackbird Ventures, Felicis, Atlassian insiders, and Zapier. In October 2025, the company was acquired by RecordPoint, a global data governance company, to combine permission-aware retrieval infrastructure with broader AI data governance capabilities and to support international expansion into Asia and Europe. The founders indicated they would pursue a new venture following the transition.

Name

Redactive

Legal name

Redactive Software Pty Ltd

Website

https://redactive.ai

Company type

Private

Founded year

2024

Operating status

Acquired

Headcount range

1–10 employees

Ownership category

akta.pro rank

Product category

AI Data Security Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Custom Computer Programming Services (541511)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

akta.pro secondary industries

Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Audit, Explainability & Accountability Tooling (traceability, reporting) (HDAAAKAL), Responsible AI, AI Governance & Compliance Services (BPAEAHAJ)

Keywords

• AI data security
• Permission-aware RAG
• Data access governance
• Shadow AI prevention
• Enterprise data permissions

Headquarters

HQ city

Melbourne

HQ country

Australia

HQ region

Oceania

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription-based SaaS: The company operates on a subscription model with Subscription Periods and recurring Subscription Fees. Billing occurs on a recurring basis during the Subscription Period (Billing Cycle). Subscriptions can be upgraded or downgraded at any time through the Account.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels9 records

Core offering

Redactive provides an enterprise AI Data Security Platform that protects organizations against AI-enabled data leaks. It connects to enterprise data sources (SharePoint, Confluence, Google Drive) to build a semantic index of unstructured data, then continuously identifies and auto-remediates misconfigured permissions at the chunk level and applies browser-level DLP to prevent sensitive data from being shared with shadow AI tools such as ChatGPT Free. The platform enables enterprises in regulated industries to deploy generative AI assistants with permission-aware RAG infrastructure.

Product overview

Redactive offers an enterprise AI Data Security Platform with two core modules: Permissions Assurance and Prompt Security. Permissions Assurance identifies and resolves misconfigured permissions at the document and chunk level using semantic AI analysis, while Prompt Security monitors shadow AI usage and prevents sensitive data from leaking via AI tool prompts at the browser level. The platform was acquired by RecordPoint in October 2025 to enhance AI capabilities in data security and governance. The company also publishes industry whitepapers targeting CISOs and COOs on AI security risks and GenAI rollout frameworks.

Differentiator

Problem solved

Functional benefit

Products and services

• Redactive AI Data Security Platform Enterprise AI security platform that protects organizations against AI-enabled data leaks by managing shadow AI usage, fixing misconfigured permissions across unstructured data sources, and ensuring AI applications only access authorized information. Targets regulated enterprises deploying generative AI assistants.
• Redactive Permissions Assurance AI-native module that identifies and resolves misconfigured permissions at the document and chunk level using semantic analysis. Detects inappropriate access that rules-based solutions fail to identify and automatically remediates permission mismatches in real-time, routing edge cases to data owners.
• Redactive Prompt Security Browser-level security module that monitors shadow AI tool usage and prevents sensitive company data from being shared in prompts. Applies customizable DLP rules across AI applications such as ChatGPT Free, Claude, and DeepSeek, intercepting traffic to detect when company data is being used and providing visibility into AI usage patterns.

Quantifiable outcome

• Deployed generative AI assistant to 1,000+ employees in 8 weeks
• +2 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

AI capability7 records

Feature5 records

Partnerships

Three partnerships are on record, tiered core and primary.

• RecordPointcoreStrategic or Co-development Partner · 22 October 2025RecordPoint, a global leader in data security and governance, acquired Redactive to combine forces for delivering a next-generation AI-native governance platform. Redactive brings live permission-aware retrieval infrastructure, cloud-native sensitive data discovery using GenAI, and embedded audit capabilities. The acquisition aims to expand RecordPoint's AI Data Governance suite and deliver comprehensive enterprise AI security capabilities.
• AWScoreTechnology or IntegrationAWS (Amazon Web Services) is a key technology partner. Redactive integrates with Amazon Bedrock to create a permissioned RAG system that ensures AI only accesses data that each employee is authorized to see. Redactive is also listed on AWS Marketplace for enterprise procurement.
• ThoughtworksprimaryImplementation/ SI/ Consulting PartnerThoughtworks partnered with Redactive and AWS to implement PEXA's security-first generative AI assistant. Thoughtworks provided implementation expertise for the enterprise AI deployment, integrating Redactive's technology with Amazon Bedrock.

Scale indicators3 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• BigID: BigID provides data intelligence, privacy, and security for enterprise data. Both companies use AI/ML for data discovery, classification, and security posture management, though BigID operates as a broader incumbent across privacy, governance, and security use cases.
• Varonis: Varonis is an established data security platform with AI-augmented capabilities for discovering sensitive data and detecting access misconfigurations across cloud and on-premises environments. Both companies focus on permission management and data exposure prevention, though Varonis operates at much larger scale as a public incumbent.
• AWS Macie: AWS Macie is Amazon's native data security and privacy service for discovering and protecting sensitive data in AWS environments. While Redactive integrates with AWS Bedrock and is listed on AWS Marketplace, Macie represents a native AWS alternative for data classification and security posture management.
• Securiti: Securiti is a comprehensive data privacy and security platform offering data discovery, consent management, and AI governance. Both companies target enterprise data security and AI governance use cases, though Securiti operates as a broader incumbent with a wider portfolio.
• Microsoft Purview: Microsoft Purview is Microsoft's enterprise data governance and security platform, which includes DLP, data classification, and access controls integrated with the Microsoft ecosystem. It competes with Redactive's permission-aware approach for AI deployments within Microsoft 365 environments.

Direct peers

• Cyera: Cyera is a DSPM (Data Security Posture Management) platform that discovers, classifies, and protects sensitive data across cloud environments. Both Cyera and Redactive use AI/ML for semantic data discovery and security posture management, targeting similar enterprise buyers concerned with data exposure in cloud and AI workflows.
• Harmonic Security: Harmonic Security focuses specifically on securing sensitive data shared with generative AI tools like ChatGPT, Claude, and other LLMs. Both companies target the shadow AI problem with browser-level DLP and prompt inspection capabilities for enterprise customers.
• Nudge Security: Nudge Security provides visibility into SaaS and AI tool usage across organizations, helping security teams discover and govern shadow IT and shadow AI. Both companies address enterprise AI governance and shadow AI prevention with similar target buyers (CISOs, security teams).
• Sentra: Sentra is a cloud-native DSPM platform that classifies and monitors sensitive data across cloud data stores. Both Sentra and Redactive use AI-driven semantic analysis to identify data security risks and misconfigurations in enterprise cloud environments.
• Concentric AI: Concentric AI is a DSPM solution that uses AI to discover, classify, and monitor sensitive data across cloud and on-premises environments. Both companies apply semantic AI analysis to identify data security risks and access misconfigurations in enterprise environments.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/channel/UCiu3kojS1Gq84KrBWXXO52A
• LinkedInlinkedin.com/company/redactiveai
• Xx.com/RedactiveAI

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds1 record

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Redactive