Question 1

What is Ketch Agent Network?

Accepted Answer

Ketch Agent Network is the agentic privacy infrastructure built into the Ketch platform. It orchestrates intelligent agents that observe your data, classify what matters, surface real risks, and execute remediation across consent, rights, assessments, data mapping, and CMP configuration.

Question 2

How is the agent network different from a privacy chatbot?

Accepted Answer

A privacy chatbot does retrieval-augmented generation over your policy documents and answers questions which is useful sometimes. The work still sits on your privacy team's desk. Ketch Agent Network is intelligent instrumentation of discrete tasks. The agents call deterministic tools, data classification, identity sync, rights orchestration, CMP configuration, risk prioritization, and others that act directly on your live systems and data. The agent decides what to do next; the tool actually does it. The output is finished work, not a transcript.

Question 3

What tools does the agent network use?

Accepted Answer

The agent network includes deterministic tools across three layers:
‍Discovery: data classification, structured and unstructured discovery, SaaS system discovery, code analysis, processing detection.
‍Permissioning: consent orchestration, identity sync, rights orchestration, data formatter, report generation, CMP configuration, translation and theme generation.
‍Risk: risk monitoring, risk prioritization, remediation generation, assessment template generation, question recommendation, employee intelligence graph, auto-population.

Each tool already exists in the Ketch product. The agent network is the orchestration layer that decides which tools to call, in what order, with what context.

Question 4

How does the agent network handle a new privacy law going live?

Accepted Answer

When a new state law (or amendment to an existing one) is published, the agent reads the regulation and identifies the consent flows, opt-out mechanisms, and disclosure changes that are required. It configures the CMP, generates translated copy, and stages the change in your environment for privacy team review.
‍
Engineering does not get a ticket. The privacy team gets a draft to approve. Virginia is the working example most customers ask about but the same pattern applies to GDPR member-state implementations, new state laws like Texas, and amendments to existing rules.

Question 5

How does the agent network connect to systems beyond databases?

Accepted Answer

The SaaS system discovery tool connects to Workday, Jira, Salesforce, GitHub, and other applications where data and processing context actually live. This is critical because traditional data discovery tools only look at structured databases, they miss the workflow systems, ticket trackers, and HR platforms where the most consequential decisions about data are made.
‍
This connectivity also powers the employee intelligence graph: by understanding who works on what across your organization, the agent network can route the right assessment question to the right SME automatically.

Question 6

How does the agent network handle sensitive data in DSR responses?

Accepted Answer

The data formatter tool produces a human-readable summary of the rights request, while the classification tool automatically filters sensitive and company-confidential information out of the response before it ever reaches the requester.|
‍
You set the criteria and constraints. The agent applies them consistently. Tables where tables make sense, prose where prose makes sense, redaction where redaction is required.

Question 7

What is the Permission Vault and how does it relate to the agent network?

Accepted Answer

The Permission Vault is the server-side, authoritative record of consent and preferences across systems. It captures permission events, context, audit logs, orchestration logs, identity resolution, real-time orchestration, and policy enforcement.
‍
The agent network reads from and writes to the Permission Vault. When the agent makes a decision about whether data can be used, processed, or shared, it consults the Vault. When the customer changes a preference, the agent propagates that change across every connected system.

Question 8

What's the difference between Ketch Agent Network and AI Sentry?

Accepted Answer

Two different problems, two different products.
‍
Ketch Agent Network is how Ketch uses AI to help your privacy team manage their privacy program — automating discovery, permissioning, assessments, and remediation.
‍
AI Sentry is how you use Ketch to manage AI usage in your business — intercepting prompts, enforcing consent and rights signals at every LLM interaction, and producing audit trails for AI governance.

Question 9

How do I get started with Ketch Agent Network?

Accepted Answer

Ketch Agent Network is currently in private beta with select Ketch customers. If you are an existing customer, contact your Customer Success Manager to discuss enrollment. If you are evaluating Ketch, request a demo and we will walk through the agent network capabilities in the context of your specific privacy program.

this is what agentic privacy Looks like

Ketch Agent Network: where privacy insight becomes action

SEE your privacy program from every angle

1. Legal obligations

2. Documented policies

3. Operational reality

Agentic data mapping

Every system, discovered and classified automatically

Every contract, read and reconciled

Processing activities, documented without the manual work

ROPA On Demand

Always on risk detection

Always-on risk detection

Prioritized by what actually gets enforced

Findings with the fix attached

Remediation on autopilot (with your permission)

Pre-populated risk assessments

Pre-fill from live system data

The right questions, sent to the right people

Contradictions caught before you submit

Every assessment type, covered

Ready to simplify your privacy compliance?
Get started.

Agentic Privacy FAQs