Skip to content
SPECIFICTION
Get listed

Confidencial

confidencial.io

WebAPISelf-hosted
Visit confidencial.io
Spec score 7.6 #11 of 23 in Cloud Encryption Software

What it is

Confidencial protects sensitive information at field, paragraph, or cell level while keeping controls attached to the data. Selective encryption can leave ordinary document content readable while protecting designated fields. Discover scans environments and classifies sensitive fields across more than 40 file types. Shield applies policy-based encryption, tokenization, redaction, deletion, or archiving. AI Guard protects retrieval-augmented generation, fine-tuning, and long-context workflows through sensitive-field tokenization and output filtering. Exchange handles sending, requesting, and signing protected files with access policies, activity tracking, and revocation. Transfers support up to 1 TB per send and more than 40 file types; external recipients can use a limited portal without accounts or installation at no cost. Deployment may be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys remain in the customer’s key-management service, including AWS KMS and Azure Key Vault.

Spec sheet

What it does
Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data.Read 8 Oct 2026 · confidencial.io
Audience
The site names legal, pharma and life sciences, private equity, insurance, financial services, and technology as industries it serves.Read 8 Oct 2026 · confidencial.io
Deployment
Confidencial offers self-hosted, hybrid, and hosted deployment; self-hosted supports cloud or on-premises environments and air-gapped setups.Read 8 Oct 2026 · confidencial.io
Integrations
The site lists AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview integrations.Read 8 Oct 2026 · confidencial.io
Headquarters
Menlo Park, California, United StatesRead 28 Sep 2026 · confidencial.io
AI workflows
AI Guard is described as protecting RAG, fine-tuning, and long-context model workflows through sensitive-field tokenization and output filtering.Read 8 Oct 2026 · confidencial.io
Data actions
Shield can encrypt, tokenize, redact, delete, or archive data according to policy.Read 8 Oct 2026 · confidencial.io
Data retention
For a data assessment, the company says it collects file and folder names and summary counts, and deletes the assessment database within ten business days after the scan.Read 8 Oct 2026 · confidencial.io
Discovery
Discover scans data environments and classifies sensitive fields across more than 40 file types.Read 8 Oct 2026 · confidencial.io
Document exchange
Exchange supports sending, requesting, and signing protected files, with access policies, activity tracking, and revocation.Read 8 Oct 2026 · confidencial.io
Exchange limit
Exchange supports transfers up to 1 TB per send and more than 40 file types.Read 8 Oct 2026 · confidencial.io
Key management
Encryption keys are generated and held in the customer’s key management service, including AWS KMS and Azure Key Vault.Read 8 Oct 2026 · confidencial.io
Recipient access
External Exchange recipients can use a limited portal without an account or installation, at no cost to them.Read 8 Oct 2026 · confidencial.io
Security assessments
The security page lists ISO/IEC 27001:2022 certification, SOC 2 Type II attestation, PCI DSS assessment, HIPAA assessment, and annual independent penetration testing.Read 8 Oct 2026 · confidencial.io
Selective protection
Its selective encryption leaves non-sensitive content readable while protecting sensitive fields inside a document.Read 8 Oct 2026 · confidencial.io

Plans and prices

Enterprise Priced on request Pricing available by contacting Confidencial for a demo Read 8 Oct 2026 · confidencial.io

Every Confidencial plan and price →

Strong points and limits

Strong points

  • Protects selected fields while leaving other text readable
  • Classifies sensitive data across 40-plus file types
  • Supports policy-based encryption and redaction
  • Handles protected exchanges up to 1 TB
  • Supports customer key-management services

Limits

  • Pricing is available only on request
  • Exchange recipients receive a limited portal
  • Deployment and key management require configuration

Who it suits

It suits organizations in legal, pharmaceutical, life sciences, private equity, insurance, financial services, and technology. Teams needing customer-controlled keys and flexible deployment can choose hosted, hybrid, or self-hosted options.

Verdict

Confidencial combines granular data controls with protected file exchange and AI workflow safeguards. Its deployment choices and external KMS support target organizations with specific security requirements.

Where Specifiction places it

Alternatives to ConfidencialAll alternatives →

Acra From $833.33/mo · Free plan 9.5 Visit