# IndyKite

> IndyKite provides a runtime control layer for agentic AI: it unifies enterprise context in an identity-centric knowledge graph and turns that context into enforceable decisions at the moment data is queried, accessed, or acted on. Founded in 2021 by Lasse Andresen (ForgeRock co-founder), headquartered in San Francisco with teams in Calgary, Oslo, and Stavanger.

Core idea: identity, data meaning, provenance, risk, and policy usually live in separate systems. IndyKite computes them together in real time so AI agents, applications, and users only do what is permitted — with full traceability. Products cover agent governance (AgentControl), runtime context queries (ContX IQ), fine-grained authorization (Knowledge Based Access Control), and unstructured-data governance (IndyKite Tags). Certifications referenced on the site include SOC 2 Type I & II, ISO 27001, GDPR, EU-U.S. DPF, and HIPAA.

## Platform

- [Platform overview](https://www.indykite.ai/indykite-ai): How the platform turns identity, metadata, provenance, and policy signals into a single real-time context engine for apps and AI.
- [AgentControl](https://www.indykite.ai/agentcontrol): Runtime governance for AI agents — context-aware authorization, MCP-based model coordination, dynamic policy orchestration, and traceable agent actions.
- [ContX IQ](https://www.indykite.ai/contx-iq): Runtime API for querying and updating the identity knowledge graph, so applications get current context and secure CRUD without downstream syncs.
- [Knowledge Based Access Control (KBAC)](https://www.indykite.ai/kbac): Externalized, fine-grained, graph-based authorization for humans, apps, and AI; supports AuthZen, OAuth/OpenID, and MCP.
- [IndyKite Tags](https://www.indykite.ai/indykite-tags): Automated tagging and classification of unstructured content (PII, PHI, financial data, IP), plus guardrails against toxic content and prompt injection, with connectors to SharePoint, OneDrive, Box, Google Workspace, Slack, and Confluence.
- [Product demos](https://www.indykite.ai/resources/demos): Guided demos of the platform and individual products.

## Solutions

- [Secure your AI agents](https://www.indykite.ai/solutions/secure-your-ai-agents): Control what agents can access, which tools they use, and which actions they execute, with real-time enforcement and decision traceability.
- [Govern unstructured data for AI](https://www.indykite.ai/solutions/govern-unstructured-data-for-ai): Content-aware classification, permission auditing (notably for SharePoint), and retrieval-time guardrails so AI is built on trusted data.
- [Externalize access control](https://www.indykite.ai/solutions/externalize-access-control): Move authorization out of application code into a central, context-aware layer for consistent enforcement across systems and shared repositories.
- [Create intelligent customer experiences](https://www.indykite.ai/solutions/create-intelligent-customer-experiences): Use live context, relationships, and consent to personalize interactions in real time, including across brands.
- [Securely share data in B2B ecosystems](https://www.indykite.ai/solutions/securely-share-data-in-b2b-ecosystems): A unified data model with granular control and visibility for compliant partner and ecosystem data exchange.

## Industries

- [Retail](https://www.indykite.ai/retail): Trusted real-time data for customer journeys, flexible payment routing, live personalization, and cross-brand loyalty.
- [Manufacturing](https://www.indykite.ai/manufacturing): A governed knowledge layer that delivers operational, product, and customer data at production speed.
- [Banking & financial services](https://www.indykite.ai/finance): Context and control for AI-driven decisions, open banking compliance, granular consent, threat detection, and governed data use.
- [Telco](https://www.indykite.ai/telco-solutions): Connect customer, service, and network data into one governed model to support automation, monetization, and B2B2X ecosystems.
- [Insurance](https://www.indykite.ai/insurance-solutions): Governed data sharing across products and brands for personalization, cross-sell, and FIDA-aligned traceability.

## Company

- [About us](https://www.indykite.ai/about/about-us): Mission, leadership, investors, and office locations.
- [Careers](https://www.indykite.ai/careers): Open roles and hiring information.
- [News](https://www.indykite.ai/about/news): Company announcements, customer wins, and press coverage.
- [Contact us](https://www.indykite.ai/contact-us): Contact form and enquiry routing.
- [Book a demo](https://www.indykite.ai/book-a-demo): Request a live walkthrough with the team.
- [Security and privacy](https://www.indykite.ai/security-and-privacy): Security posture, certifications, and privacy practices.
- [Trust center](https://trust.indykite.com/): Live compliance and security documentation portal.

## Resources

- [Blog](https://www.indykite.ai/blog/all): Articles on agentic AI security, authorization, data trust, and governance.
- [Knowledge center](https://www.indykite.ai/resources/knowledge-center): Explainer library covering topics such as agentic AI security, zero trust for agents, context graphs, dynamic authorization, and AI data governance.
- [Glossary](https://www.indykite.ai/resources/knowledge-center/glossary): Definitions of identity, authorization, graph, and AI governance terminology.
- [Guides & whitepapers](https://www.indykite.ai/resources/download-center): Product sheets, e-guides, and architecture guides, including the AgentControl Architecture Guide.
- [Insights & interviews](https://www.indykite.ai/resources/insights): Conversations and analyst-style perspectives on enterprise AI trust.
- [Events](https://www.indykite.ai/resources/events): Upcoming and past webinars and conference appearances.

## Developers

- [Documentation](https://docs.indykite.com/docs/get-started): Getting-started guides for the platform and APIs.
- [SDKs](https://docs.indykite.com/docs/apis/sdks): Client libraries and API references.
- [Developer resources](https://developer.indykite.com/): Developer hub with tooling and integration material.
- [Community forum](https://forum.indykite.com/): Q&A and discussion with the IndyKite community.
- [Sandbox / Hub login](https://us.hub.indykite.com/login): Sign in to try the platform in a sandbox environment.

## Optional

- [Subscription agreement](https://www.indykite.ai/privacy-and-security/subscription-agreement): Commercial terms for platform subscriptions.
- [Service Level Agreement](https://www.indykite.ai/privacy-and-security/service-level-agreement): Availability and support commitments.
- [Data Processing Agreement](https://www.indykite.ai/privacy-and-security/data-processing-agreement): Data processing terms for customers.
- [Responsible Disclosure Policy](https://www.indykite.ai/privacy-and-security/responsible-disclosure-policy): How to report security vulnerabilities.
- [Privacy Policy](https://www.indykite.ai/privacy-and-security/privacy-policy): How IndyKite handles personal data.
- [Cookie Policy](https://www.indykite.ai/privacy-and-security/cookie-policy): Cookie usage on the website.
- [Terms of Use](https://www.indykite.ai/privacy-and-security/terms-of-use): Website terms.