BigID

New York, NY, United States All United States companies → — Founded 2015

Developer Platform / API Healthcare Analytics / BI

Family Medicine Hospital Medicine Internal Medicine

Legal, Compliance & Security

Series E — $308M-$320M

Website Claim this company

Products

BigID

Legal, Compliance & Security

BigID is an enterprise-grade data security and compliance platform that delivers industry-leading DSPM, Risk Remediation, DLP, Access, Privacy, Labeling, Deletion, and Data Protection in one unified Data Security Platform (DSP).

Contact for pricing

See all 1 product →

About BigID

BigID is an enterprise data intelligence and security platform that assists organizations in discovering, managing, and protecting sensitive information across various environments, including cloud, on-premise, and hybrid systems. For physicians and healthcare organizations, BigID offers specialized capabilities to address the unique challenges of managing protected health information (PHI) and electronic health records (EHR). The platform utilizes machine learning (ML) and natural language processing (NLP) driven classification, tailored for healthcare, to accurately identify and classify PHI, ePHI, PII, and other regulated health data, such as EHRs, lab results, claims, and billing records. This helps healthcare entities achieve stronger HIPAA compliance and gain unmatched visibility into their sensitive data across EHR systems, medical devices, research databases, SaaS, and cloud environments.

Beyond discovery and classification, BigID helps healthcare organizations streamline regulatory compliance with mandates like HIPAA and other global health data regulations. It facilitates the mapping of sensitive data to regulatory requirements, automates Data Subject Access Request (DSAR) and deletion workflows, and simplifies reporting. The platform also focuses on minimizing risk by pinpointing over-permissioned EHRs, exposed patient records, and insider threats, thereby helping enforce least privilege access and reduce breach risk. In the context of AI, BigID enables the safe and ethical use of health data for AI, analytics, and research by governing training datasets, detecting bias, and ensuring sensitive data is not exposed or misused in large language models (LLMs) and generative AI projects. This comprehensive approach helps healthcare providers, payers, pharmaceutical companies, and life sciences organizations manage data security, privacy, compliance, and governance throughout the entire data lifecycle.

Focus Areas

data security data privacy compliance AI governance data discovery data classification data security posture management (DSPM) data loss prevention (DLP) risk remediation access intelligence data lifecycle management

Business Intelligence

Key Investors	Riverwood Capital, Silver Lake Waterman, Advent International, Salesforce Ventures, Tiger Global Management, Bessemer Venture Partners, Scale Venture Partners, Boldstart Ventures, Glynn Capital, ClearSky, Comcast Ventures, SAP.iO Foundries, Deep Fork Capital
Partnerships	Knox Systems (for FedRAMP certification)
Acquisitions	illow (acquired January 31, 2025)
Technology	cloud-native, AI-powered classification engine, identity intelligence, machine learning, agentless deployment

What Physicians Need to Know

Data Security

BigID offers a unified platform for data security, combining Data Security Posture Management (DSPM), Data Loss Prevention (DLP), data access governance, and AI security. They focus on discovering, classifying, and remediating sensitive data risk across cloud, SaaS, hybrid, on-prem, and AI environments. BigID continuously monitors data estates for overexposure, misconfigurations, privilege creep, and shadow data, prioritizing risks with rich metadata and behavioral signals. They also provide encryption for data at rest and in transit using AES-256, SSH, and TLS 1.2+ protocols.

Data Privacy & Compliance

BigID specializes in automating privacy operations and streamlining compliance with global regulations such as HIPAA, HITECH, GDPR, CPRA, LGPD, and the EU AI Act. Their platform offers identity-aware data mapping, automated Records of Processing Activities (RoPA) and Privacy Impact Assessments (PIA), data subject request (DSR) fulfillment, and consent and preference management. They help organizations discover and map personal, sensitive, and regulated data, and enforce policies across their entire data landscape.

AI Governance

BigID provides an AI Governance Suite to help organizations manage AI risk and ensure compliance. They focus on classifying and curating data for AI models, cleansing and ensuring compliance of training data, managing access to Large Language Models (LLMs), copilots, and agents, and comprehending model risk through assessments. BigID helps secure sensitive data used in AI models, prompts, training datasets, and pipelines, and offers solutions to track data lineage and validate compliance with evolving AI regulations.

Data Discovery & Classification

BigID offers advanced, ML-driven data discovery and classification capabilities across structured, unstructured, and semi-structured data, including files, documents, mail, images, databases, data lakes, and AI pipelines. They use machine learning, natural language processing (NLP), deep pattern matching, and contextual analysis to classify various types of sensitive data like PHI, PII, PCI, intellectual property, and credentials. Their classification is purpose-built for enterprise environments and can be customized with pre-trained and trainable classifiers.

Data Security Posture Management (DSPM)

BigID's DSPM solution continuously monitors data across multi-cloud, SaaS, and hybrid environments to identify and remediate data risks such as overexposure, misconfigurations, privilege creep, and shadow data. It provides actionable insights and alerts for prioritized remediation and policy enforcement, integrating DSPM with privacy workflows, consent management, and retention policies.

Data Loss Prevention (DLP)

BigID enhances DLP by providing deep data intelligence, including sensitivity, classification, metadata, ownership, location, and access context. They help operationalize cloud DLP across data discovery, data movement, insider risk, AI data exposure, policy enrichment, and automated response. BigID's approach aims to reduce false positives, enrich controls, prioritize risk, and extend existing DLP investments.

Risk Remediation & Access Intelligence

BigID helps organizations identify high-risk data, flag data flows and access patterns, and continuously monitor access activity to reduce insider and access risks. They provide risk scoring based on data type, location, and residency, and enable enforcement of least privilege access. BigID's platform also supports automated remediation actions like quarantining, deleting, minimizing, and labeling sensitive data.

Data Lifecycle Management

BigID assists with automating retention, deletion, and data hygiene by identifying and remediating duplicate, redundant, and stale sensitive data. They enable policy-driven retention management to ensure data is kept in accordance with regulations and internal standards.

Physician Tip

For physicians, BigID's platform is purpose-built for sensitive healthcare environments, helping to secure, govern, and manage sensitive health data across the ecosystem. Key benefits include: n* **Automated PHI Discovery & Classification:** Automatically find and classify Protected Health Information (PHI), Personally Identifiable Information (PII), genetic data, and clinical content across EHRs, data lakes, research databases, and file shares, both on-premise and in the cloud.n* **Streamlined HIPAA & Global Health Compliance:** Simplify compliance with HIPAA, HITECH, GDPR, and other global health data regulations through automated data mapping, policy enforcement, and reporting.n* **Reduced Risk & Enhanced Protection:** Detect overexposed, stale, or misused health data, identify open access and misconfigurations, and enforce least privilege access to minimize breach risk and safeguard patient privacy.n* **Secure AI for Research & Diagnostics:** Control exposure, lineage, and access for sensitive data used in AI/ML models, ensuring compliant cloud migration and secure AI-powered research and drug discovery.n* **Automated Data Retention & Deletion:** Apply retention and deletion policies to clinical documentation, lab notebooks, and manufacturing records in accordance with GxP and internal standards.

BigID is designed to integrate seamlessly across various data stacks and security tools. They offer certified integrations with platforms like Databricks and Snowflake, and proven catalog integrations with Alation, Collibra, Informatica, Atlan, Purview, and Unity. For security, BigID integrates with tools like Wiz and Splunk, and has native connections to ServiceNow CMDB, ITSM, and IRM. Their open architecture and extensible platform, with an App Development Framework supporting Java, Javascript, Node.js, and Python, allows for custom app development and leveraging BigID's data intelligence with existing tools.

At a glance

Founded 2015

HQ New York, NY, United States · United States

Team size 645-721

CEO Dimitri Sirota

Funding Series E — $308M-$320M

Products 1

Visit site

Products by BigID

1 product in the directory

BigID

Legal, Compliance & Security

Contact for pricing

What the Web Says

BigID is a data intelligence platform specializing in data discovery, privacy management, and data governance, utilizing AI and machine learning to identify and classify sensitive data across various environments. While praised for its comprehensive data discovery and compliance capabilities, some users have reported challenges with implementation complexity, slow scanning processes, and a clunky user interface.

Overall: Mixed

Strengths

Unmatched depth in data discovery, accurately identifying sensitive data across diverse systems.
AI and machine learning capabilities for sophisticated data classification, reducing false positives.
Strong support for various privacy regulations like GDPR, CCPA, and HIPAA.
Breadth of data intelligence serves multiple stakeholders including privacy, security, and data governance teams.
Easily configurable and user-friendly interface for business users.
Good for technical reporting and integration flexibility with APIs.

Limitations

Significant implementation complexity for large-scale deployments and a steep learning curve.
Scanning processes can be slow, and the user interface can be clunky or overwhelming.
High cost, with enterprise-level pricing starting at $25,000/year and scaling with data volume.
Reports of false positives in data classification and limited built-in remediation tools.
Some users experienced issues with account access and limited functionality after BigID's acquisition of Illow.
Concerns about inexperienced sales leadership and poor management, leading to negative employee experiences.

Based on reviews from: AuditXYZ, G2, Reddit, Capterra, Indeed.com, Comparably, Gartner Peer Insights, SoftwareWorld

Last updated: 2026-10-01

Videos

News, demos, and interviews about BigID.

Loading videos...

Videos load interactively. If none appear, search YouTube for BigID →

View all on YouTube

Press & Coverage

Security Boulevard

BigID Announces $70 Million in New Investment, Raising the Company's Valuation to $1B

BigID, a leader in data discovery and intelligence, announced a $70 million Series D financing round, bringing its valuation to over $1 billion. This investment will accelerate BigID's focus on data intelligence for privacy, protection, and perspective, expanding sales and marketing, and delivering new applications for data actioning in privacy, security, and governance.

2020-12

SiliconAngle

Data protection startup BigID raises $70M on $1B unicorn valuation

BigID Inc., a data protection and privacy startup, secured $70 million in new funding, achieving a unicorn valuation of over $1 billion. The Series D round, led by Salesforce Ventures and Tiger Global, will be used to develop new applications for data privacy, security, and governance.

2020-12

FINSMES

BigID Raises $30M in Additional Series D Funding Closed at 100M; Valued at $1.25 Billion

BigID, an actionable data intelligence platform, raised an additional $30 million in Series D funding, closing the round at $100 million and valuing the company at $1.25 billion.

2021-01

BigID

AI in Healthcare: Advancements, Challenges, and Trends | BigID

This article discusses the transformative role of AI in healthcare, addressing privacy, security, and ethical challenges. It highlights how BigID Next helps secure AI ecosystems by providing a modular data platform for data risk across security, regulatory compliance, and AI.

2025-03

BigID

Securing Healthcare Data: A Practical Guide for Security Teams | BigID

This guide emphasizes the critical need for robust data security in the healthcare industry due to the sensitive nature of patient data and rising cyberthreats. BigID's platform assists healthcare organizations in discovering, classifying, and protecting sensitive data to comply with regulations like HIPAA.

2025-05

Ctech

Data security unicorn BigID cuts 20% of workforce in shift to AI-first strategy | Ctech

BigID is reportedly laying off 20% of its workforce as it shifts towards an 'AI-first' operating model. The company, which develops AI-based solutions for data security and compliance, aims to adapt its workforce to accelerate this new approach.

2026-05

PR Newswire

BigID Delivers Integrated AI Governance for Employee AI Use: One Platform for Access Enforcement, Activity Monitoring, and Data Loss Prevention - PR Newswire

BigID announced an integrated AI governance solution to manage employee AI use, combining Data Loss Prevention, Data Access Governance, and Data Activity Monitoring. This platform addresses the challenges of rapid AI adoption outpacing security controls within organizations.

2026-03

PR Newswire

BigID Launches AgentIQ: The Agentic Automation Layer for Data & AI Security and Compliance - PR Newswire

BigID introduced AgentIQ, an agentic automation interface designed to allow customers to operate their data security and compliance programs autonomously. This new offering enables users to manage data and AI security and compliance violations through prompts or agents.

2026-09

Frequently Asked Questions

How does BigID help healthcare organizations comply with HIPAA and other data privacy regulations?

BigID helps healthcare organizations streamline compliance with HIPAA, HITECH, GDPR, and other global health data regulations by automatically discovering and classifying protected health information (PHI) and personally identifiable information (PII) across various systems. It maps sensitive data to regulatory requirements, automates policy enforcement, and generates audit-ready reports to demonstrate compliance.

What are BigID's capabilities for data discovery and classification, especially concerning unstructured healthcare data?

BigID utilizes machine learning (ML), natural language processing (NLP), and deep learning to automatically discover and classify PHI, PII, genetic data, and clinical content across structured and unstructured sources, including EHRs, data lakes, research databases, and file shares. This advanced classification goes beyond traditional pattern matching to understand context and relationships within the data, even for challenging unstructured data like handwritten notes, medical images, and audio/video files.

How does BigID address data security posture management (DSPM) and data loss prevention (DLP) for sensitive healthcare data?

BigID's platform combines DSPM, DLP, and data access governance to provide continuous visibility into data exposure, misconfigurations, and compliance risks. It identifies and labels sensitive data across cloud and on-premise environments, helping to enforce strict access controls, monitor for unusual patterns that may indicate fraudulent activities, and prioritize remediation actions to reduce the risk of data breaches.

What role does BigID play in AI governance and securing data used in AI initiatives within healthcare?

BigID helps healthcare organizations enable safe and ethical use of health data for AI, analytics, and research. It governs training datasets, detects bias or drift, and ensures sensitive data isn't exposed or misused in large language models (LLMs) and generative AI projects by building policies based on privacy, sensitivity, regulation, and access.

Can BigID help with risk remediation and access intelligence to prevent insider threats and overexposure of patient data?

Yes, BigID provides access intelligence and remediation capabilities to help identify and address overexposed, stale, or misused health data. It connects sensitive data, identities, permissions, activity, and ownership to pinpoint over-permissioned EHRs, exposed patient records, and insider risks, allowing organizations to enforce least privilege and reduce their attack surface.

How does BigID support data lifecycle management, including data retention and deletion, for healthcare records?

BigID offers a unified platform to manage the entire data lifecycle, from discovery to deletion. It helps automate data retention and deletion policies for clinical documentation, lab notebooks, and manufacturing records in accordance with regulations like GxP and internal standards, reducing risk, lowering storage costs, and streamlining record management by identifying and removing redundant, obsolete, and trivial (ROT) data.

What is BigID's pricing model, and what kind of support and partnerships does it offer for healthcare clients?

BigID's pricing is subscription-based, typically determined by factors such as data volume, number of assets, or users, with custom quotes available for enterprise needs. They offer support through a client support portal, email, and a knowledge base, and partner with various technology alliances, managed service providers (MSPs), and global systems integrators (GSIs) to provide comprehensive solutions and deployment expertise for healthcare clients.

Related Companies

Suggest an Edit →