Native Governance Enhances Immuta Sales
Zachary Friedman, associate director of product management at Immuta, on security in the modern data stack
The core moat here is not owning the lowest level permission primitive, it is turning every new warehouse control into a better cross platform policy engine. When Snowflake and Databricks add row filters, masking, tags, and catalog level governance, Immuta gets more native hooks to enforce policies without changing how analysts query data. That makes the product easier to deploy, less visible to end users, and more valuable in mixed platform environments.
-
Immuta sells simplest when customers want one policy model across several engines. In the interview, the product is described as one policy engine that translates business rules into native controls across Snowflake, Databricks, BigQuery, Redshift, and Starburst. Better native controls underneath reduce translation friction rather than replacing the need for that abstraction layer.
-
The buyer problem is operational, not just technical. A bank or pharma company does not want analysts routed through a proxy or forced to learn a new workflow. Immuta uses native Snowflake policies and Databricks Unity Catalog so users can keep querying the same tables, while results are filtered or masked in place. That is why partner feature depth can increase Immuta win rates.
-
This is the same coopetition pattern seen across the modern data stack. Snowflake and Databricks keep broadening their platforms, but cross cloud vendors still win where customers run multiple systems and want one control plane. dbt has made the same argument from the transformation layer, and Databricks itself has turned Unity Catalog into a broader governance wedge for expansion across data and AI workloads.
Going forward, every step Snowflake and Databricks take toward finer grained governance should expand the surface area Immuta can orchestrate. As governance spreads from tables into models, functions, volumes, and AI workflows, the standalone winner is the company that can express one business policy once and enforce it everywhere the enterprise stores and uses data.