Kiteworks and Eggsplain team up on governed on-premises AI

Kiteworks and Stockholm-based Eggsplain announced a partnership on Oct. 28, 2026 to add data policies and tamper-evident audit logs to on-premises AI systems. The deal is aimed at regulated organizations in sectors like defense and healthcare that need AI without sending sensitive data to the public cloud.

Why it matters: - Regulated organizations want AI tools they can use without moving sensitive data into a public cloud. - The partnership adds policy enforcement and auditability to on-premises AI, which can help customers control access and demonstrate compliance. - Defense, healthcare and critical infrastructure operators are among the main use cases.

What happened: - Kiteworks announced an alliance partnership with Stockholm-based Eggsplain on Oct. 28, 2026. - The partnership connects Kiteworks’ data control plane with Eggsplain’s on-premises AI platform. - The offering is available for joint customers. - The deal is designed for organizations that cannot send data to a public cloud.

The details: - Eggsplain runs sovereign, cloud-free AI on customer premises using pre-installed Nest hardware, private models, agents and an AI App Store. - Kiteworks runs alongside Eggsplain’s hardware and connects through the Model Context Protocol, or MCP. - Every AI request for sensitive data passes through the Kiteworks data control plane. - Kiteworks’ Data Policy Engine evaluates the data being accessed, the person or agent making the request, and the specific action requested against customer policy rules. - If a request does not comply, Kiteworks can block it, limit what a user can do with a file, or route it for approval. - Every action is recorded in a tamper-evident audit log showing who or what made the request and which data it touched. - Kiteworks Compliant AI applies the same rules to AI agents that apply to people. - The controls support compliance with GDPR, UK GDPR and HIPAA for personal data in healthcare. - Kiteworks also supports NIS2 compliance for critical infrastructure sectors including energy, transportation, banking and water. - A solution brief is available with more details. More information

Between the lines: - The partnership reflects a broader push to make AI usable in highly regulated environments without weakening data governance. - Logging every prompt from the first request addresses a common concern in enterprise AI: proving what data was touched, by whom and by what system. - The joint pitch combines Eggsplain’s on-premises compute with Kiteworks’ controls, positioning governance as part of the AI stack rather than an afterthought. - Petter Berglund, Eggsplain’s head of channel and alliances, said the record exists from the very first prompt. - Rick Goud, Kiteworks’ field CTO, said the companies are giving customers AI they can run on their own terms and prove are governed.

What's next: - Joint customers can now use the partnership offering. - The companies are likely to target regulated buyers that need audit trails and policy enforcement before broad AI deployment. - The partnership may expand if customers demand more governed, on-premises AI options.

The bottom line: - Kiteworks is betting that AI adoption in regulated industries depends as much on data control and auditability as on model performance.