Enterprise data rules rarely move at the same pace as the data itself, a gap Kyle DuPont, Founder and CEO of DataXray (Ohalo), has spent eight years building tools to close. In this second installment of a three-part series, DuPont continues the conversation with Maribeth Achterberg, CDO Magazine Editorial Board Member, on zero trust security, regulatory compliance and enterprise data management converging into one discipline.

DuPont traces data loss prevention as it moves from a perimeter defense to a portable one. As files leave the network for operational reasons, protection has to travel with them, so zero trust attributes and metadata are becoming inseparable.

That same foundation carries into regulated industries. Banking, defense contracting and healthcare organizations need data sovereignty and air-gapped deployment, and DuPont notes the same taxonomy speeds up audit response.

DuPont explains that compliance splits into two buckets: external regulation such as GDPR and CPRA, and internal policy such as records retention. Both rest on the same metadata foundation, letting teams respond to either without building separate systems.

Key themes:

• Zero trust in practice: Protection now follows files past the network edge instead of stopping at it.
• Regulated industry demands: Sovereignty, air-gapped deployment and audit readiness matter as much as certifications.
• Compliance as taxonomy: External regulation and internal policy trace back to one metadata foundation.
• A changing buyer landscape: Data management leaders now join conversations once reserved for security teams.

Did you miss the previous episode?

On the move? Take this conversation with you. If you don’t have time to finish the video, you can stream the complete, uninterrupted audio edition of this episode on the go.