Confidencial

Paid APISelf-hostedWeb

What Confidencial is

Confidencial protects sensitive information at the field, paragraph, or cell level, with controls that stay attached to the data. Its selective encryption can leave ordinary document content readable while guarding designated sensitive fields. Discover scans data environments and classifies sensitive fields across more than 40 file types. Shield can encrypt, tokenize, redact, delete, or archive information according to policy. AI Guard is described for RAG, fine-tuning, and long-context model workflows, using sensitive-field tokenization and output filtering. Exchange supports sending, requesting, and signing protected files with access policies, activity tracking, and revocation. It supports transfers up to 1 TB per send; external recipients can use a limited portal without an account or installation at no cost. Integrations include AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview. Deployment can be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys are generated and held in the customer's key management service, including AWS KMS and Azure Key Vault. Listed security assessments include ISO/IEC 27001:2022 certification and SOC 2 Type II attestation. Pricing is available on request.

Who it suits

Confidencial may suit organizations in legal, life sciences, private equity, insurance, financial services, or technology that need controls for sensitive data. Its deployment options include self-hosted and air-gapped environments.

What it does well

Protects data selectively at field, paragraph, or cell level.
Discover classifies sensitive fields across 40-plus file types.
Exchange supports transfers up to 1 TB per send.
External recipients need no account or installation.

What to know first

Pricing is available only on request.
Self-hosted setup and customer key management require customer-side arrangements.

Plans

Plan	Billed and limits	Price
Enterprise	Pricing available by contacting Confidencial for a demo	On request

As confidencial.io lists them, read 8 Oct 2026. The maker's own page has the final word.

Getting started

Visit the Confidencial website.
Contact Confidencial to request a demo and Enterprise pricing.
Select hosted, hybrid, or self-hosted deployment.
Choose a cloud, on-premises, or air-gapped environment for self-hosted deployment.
Configure customer key management, including AWS KMS or Azure Key Vault if applicable.
Connect data sources or listed integrations, then apply policies through Discover, Shield, AI Guard, or Exchange.

Verdict

Confidencial combines data discovery, policy-based actions, and protected file exchange with several deployment options. Buyers should request pricing and consider which deployment and customer key-management setup they need.

Questions

How much does Confidencial cost?

Confidencial is paid. Enterprise pricing is available by contacting the company for a demo.

What deployment options are available?

It offers hosted, hybrid, and self-hosted deployment. Self-hosted setups can run in cloud or on-premises environments, including air-gapped setups.

Which integrations does it list?

Listed integrations include AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview.

Can external recipients access protected files without installing anything?

Yes. External Exchange recipients can use a limited portal without an account or installation, at no cost to them.

What does Exchange support?

Exchange supports sending, requesting, and signing protected files, with access policies, activity tracking, and revocation. It supports transfers up to 1 TB per send and more than 40 file types.

Where are encryption keys held?

Keys are generated and held in the customer's key management service, including AWS KMS and Azure Key Vault.

Facts from Confidencial's own pages

AI workflows: AI Guard is described as protecting RAG, fine-tuning, and long-context model workflows through sensitive-field tokenization and output filtering. · confidencial.io, 8 Oct 2026
Audience: The site names legal, pharma and life sciences, private equity, insurance, financial services, and technology as industries it serves. · confidencial.io, 8 Oct 2026
Data actions: Shield can encrypt, tokenize, redact, delete, or archive data according to policy. · confidencial.io, 8 Oct 2026
Data retention: For a data assessment, the company says it collects file and folder names and summary counts, and deletes the assessment database within ten business days after the scan. · confidencial.io, 8 Oct 2026
Deployment: Confidencial offers self-hosted, hybrid, and hosted deployment; self-hosted supports cloud or on-premises environments and air-gapped setups. · confidencial.io, 8 Oct 2026
Discovery: Discover scans data environments and classifies sensitive fields across more than 40 file types. · confidencial.io, 8 Oct 2026
Document exchange: Exchange supports sending, requesting, and signing protected files, with access policies, activity tracking, and revocation. · confidencial.io, 8 Oct 2026
Exchange limit: Exchange supports transfers up to 1 TB per send and more than 40 file types. · confidencial.io, 8 Oct 2026
Headquarters: Menlo Park, California, United States · confidencial.io, 28 Sept 2026
Integrations: The site lists AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview integrations. · confidencial.io, 8 Oct 2026
Key management: Encryption keys are generated and held in the customer’s key management service, including AWS KMS and Azure Key Vault. · confidencial.io, 8 Oct 2026
Recipient access: External Exchange recipients can use a limited portal without an account or installation, at no cost to them. · confidencial.io, 8 Oct 2026
Security assessments: The security page lists ISO/IEC 27001:2022 certification, SOC 2 Type II attestation, PCI DSS assessment, HIPAA assessment, and annual independent penetration testing. · confidencial.io, 8 Oct 2026
Selective protection: Its selective encryption leaves non-sensitive content readable while protecting sensitive fields inside a document. · confidencial.io, 8 Oct 2026
What it does: Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data. · confidencial.io, 8 Oct 2026

Where Confidencial stands on Freedom251

Cloud Encryption Software#11 of 23