GOV-22: Data access boundaries
In short: Define which data classes each agent may read or write, and enforce those limits at the data source or gateway. Tool permissions alone do not stop an agent from reading a whole customer table. Data boundaries keep sensitive records out of prompts and outputs.
1GOV-22
What does GOV-22 require?
Define which data classes each agent may read or write, and enforce those limits at the data source or gateway.
Why does it matter?
Tool permissions alone do not stop an agent from reading a whole customer table. Data boundaries keep sensitive records out of prompts and outputs.
How do you test it?
- Ask for the data classes allowed for three agents.
- Request restricted data through an agent and confirm refusal.
- Check boundary decisions appear in the audit log.
Which platforms document GOV-22?
No platform in the register documents this control in full.
- 9.10NewCore not found in public materialChecked: NewCore: Discover; NewCore: Secure; NewCore: Govern; NewCore: Identity foundation; NewCore emerges from stealth; NewCore on AWS Marketplace, read
- 8.35Silverfort not found in public materialChecked: Silverfort: AI Agent Security; Silverfort unveils AI Agent Security; Silverfort and Google Cloud Agent Gateway; Silverfort pricing, read
- 7.30Astrix Security not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- 7.30Cyera Identity not found in public materialChecked: Oasis Agentic Access Management; Cyera completes Oasis Security acquisition, read
- 6.85Descope not found in public materialChecked: Descope Agentic Identity Hub; Descope Agentic Identity Hub 3.0, read
- 6.55Aembit not found in public materialChecked: Aembit home; Aembit IAM for Agentic AI is generally available; Aembit pricing, read
- 6.55Token Security not found in public materialChecked: Token Security home, read
- 6.55SailPoint Entro not found in public materialChecked: SailPoint agentic AI security; SailPoint closes Entro Security acquisition, read
- 6.35Clutch Security not found in public materialChecked: Clutch Security platform, read
- 5.50Idira not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read
Which framework references apply?
No framework mapping is confirmed for this control yet. See the framework crosswalks for what we checked.
Which controls are related?
- GOV-03Documented purpose
- GOV-10Tool allow-listing and hiding
Reviewed by The Register desk