Sovereign DSPM Platform for Auditing, Classifying and Protecting Enterprise Data

Arexdata is a Madrid-based data security vendor whose DSPM platform audits, classifies and protects the sensitive information enterprises hold across on-premises and cloud estates. Founded in 2022 by Pedro Tortosa and co-founder and CTO Alberto Gonzalez, the company was built around the observation that organisations were assembling several disconnected tools to answer basic questions about their data. Its customers are typically regulated European enterprises that must demonstrate GDPR, NIS2 and ENS compliance across distributed environments.

The platform connects to file servers, NAS, endpoints, databases and collaboration services such as Microsoft 365, SharePoint, OneDrive and Google Workspace, then runs four coordinated modules against them. Audit Trail records file access, modification and movement for forensic reconstruction; Data Access Governance surfaces and remediates excessive permissions under least-privilege and Zero Trust rules; Data Classification tags critical and personal records across those environments; and AI Risk Analytics watches for unsanctioned AI tools and sensitive content entering prompts, using OCR and anomaly detection.

Sovereignty is the clearest point of separation: detection, classification, OCR and clustering models execute locally rather than in a vendor cloud, which matters to European buyers that cannot export regulated data for processing. Integration with corporate and agentic AI systems runs over MCP, and prompt-level auditing extends to assistants such as Copilot. Recognition includes a listing on Gartner Peer Insights for DSPM, where the company claims to be the only European-origin vendor named, alongside INCIBE, CCN and ENS validation.