Big companies often maintain huge troves of customer data, and small mistakes can jeopardize privacy and legal compliance. Immuta builds software to help businesses govern, share, and work with data while adhering to privacy laws, such as the EU’s General Data Protection Regulation. The software determines who can access what information for what purpose—allowing doctors to retrieve patient records during a drug trial, for example, but hiding identifying data from drug companies when they study the aggregated results. When laws and regulations are passed (such as the 2018 California Consumer Privacy Act), Immuta updates its software to comply. In 2019, the company added features enabling organizations to merge data and adjust access in emergencies.