Most data security tools are good at telling you what’s wrong and Thales’ launch goes further by fixing it.
On October 5, the French technology group announced CipherTrust Data Security Posture Management (DSPM), a platform that finds sensitive data, ranks the risks and then protects it through encryption, masking or tokenisation – all without leaving the platform.
The Problem With Permissions
Sensitive data is no longer confined to a single location and is instead distributed across cloud infrastructure, SaaS applications on-premises systems analytics environments and third parties. The use of AI makes this sprawl harder to govern. As copilots and agents gain access to enterprise data, information moves into new repositories and workflows quicker than traditional governance can keep pace.
Thales argues that traditional DSPM remediation often focuses on restricting who can reach the data. CipherTrust DSPM adds protection of the data itself.
“Organisations don’t need another security tool that simply gives them a longer list of problems to investigate,” said Todd Moore, Vice President of Data Security Products at Thales. “They need to understand which sensitive data is truly at risk and take direct action to reduce it. While traditional DSPM remediation often focuses on restricting who can access data, CipherTrust DSPM goes further by connecting risks to protections such as encryption and tokenisation, helping protect the data itself, rather than relying on permissions alone.”
What It Does
CipherTrust DSPM covers both structured and unstructured data across cloud, on-premise and hybrid sources and is delivered as a service. It combines discovery and classification with access, activity and behavioural context to flag the risks that matter most. AI-driven analytics also watch for unusual access and link signals into attack chains, aimed at threats including insider risk.
“CipherTrust DSPM’s ease of deployment and the accuracy of its data classification enables us to help customers quickly gain understanding of where their sensitive data is, who or what can access it, how to protect it, and without slowing AI adoption. These capabilities provide significant value to customers looking to embrace AI while maintaining control of their most sensitive information,” said Hiroji Sugito, Principal Data Security Engineer of Tokyo Electron Device.
Why It Matters
This ties back to a gap highlighted in the 2026 Thales Data Threat Report. Even among AI security leaders, just 36 percent know where all their data is stored and 43 percent fully classify it, and the figures are lower for laggards. Knowing where data lives is the first step, and DSPM seems to be built for that step.
Thales currently offers demos and a free trial, with no general availability date, pricing or regional rollout currently provided.
