Weekly Vendor Synthesis — 2026-09-18

Tag: S-2026-09-18-weekly-vendor-synthesis Type: own-writing Author(s): Paul (automated weekly DG/DM vendor-market briefing task, run on his behalf) Date of source: 2026-09-18 Date ingested: 2026-09-18 Authority weight: high — own synthesis, but built entirely on already-ingested daily vendor-intelligence captures (each individually medium/low authority per its own Source page); no claim here is independently more verified than its underlying daily source. Raw file: S-2026-09-18-weekly-vendor-synthesis (see /_raw_sources/S-2026-09-18-weekly-vendor-synthesis.md)

What it claims

A weekly synthesis of the seven days of Open Brain Data Governance / Data Management vendor-intelligence captures to 2026-09-18: 10 raw captures, of which 6 represented genuinely new vendor moves (Alation AIOS Expansion; OneTrust AI-Ready Governance Report + leadership/event news; Informatica MCP GA expansion; Fivetran + dbt Labs’ dbt Summit wave; Microsoft Purview’s Data Lifecycle Management roadmap wave; Cyera’s completed Oasis Security acquisition) and 4 were duplicate re-captures of events already logged in the wiki in prior weeks (2 Ataccama, 1 Microsoft Purview, 1 Alation). It clusters the week’s moves into four capability themes (governed AI-agent context via MCP; retention/legal-hold/DLP evidence controls; catalogue platform expansion; privacy/sensitive-data/non-human-identity consolidation), finds no DG/DM vendor named a specific EU/UK obligation in its own positioning this week, records the Cyera-Oasis consolidation as the week’s clearest competitive-landscape shift, and draws three practitioner implications for Paul’s regulated-FS assurance and governance-design work. It flags Ataccama’s quiet week (no genuinely new move despite two raw captures) and a continuing “pure-play quiet streak” (Collibra, Solidatus, Atlan, BigID, Immuta, Monte Carlo, SAP, Qlik) as the watch items for next week.

Notable quotes

None — this is an own-writing synthesis of prior captures rather than a quoted external source; notable verbatim vendor quotes are preserved on the individual daily Source pages it draws on (e.g. Alation’s “first cross-platform registry…” claim on S-2026-09-18-alation-aios-expansion).

What’s speculative vs. asserted

All vendor capability, availability and impact claims summarised here are vendor marketing relayed from the underlying daily captures and are asserted by the vendors, not independently verified by this wiki. All regulatory read-across (BCBS 239, GDPR, DORA, EU AI Act, FCA/PRA mappings) is this synthesis’s own inference and is marked as such throughout; no vendor named a specific regulation or standard in its own materials this week. The “6 distinct moves vs. 4 duplicates” classification and the “no genuinely new Ataccama move” finding are this synthesis’s own analysis of the raw Open Brain capture set, cross-checked against existing wiki page content at the time of writing.

Topics this feeds

Alation, Ataccama, OneTrust, Informatica, Fivetran + dbt Labs, Cyera, Microsoft Purview, Vendor Lifecycle Events as Evidence-Continuity Risk

Open questions raised

• Will Ataccama surface a genuinely new move next week, or is the pure-play quiet streak spreading to a second consecutive DG/DM incumbent?
• Does Microsoft’s own changelog confirm GA for the re-dated Purview network-layer DLP and departed-user-deletion items before they are cited as operating controls?
• Is Cyera’s “500% NHI growth in six months” claim methodologically sound, or (as KuppingerCole suggests) an unmethodologised vendor figure?
• Are Informatica’s newly-GA AWS Bedrock/Amazon Quick MCP capabilities new servers, or the June Microsoft Foundry set re-hosted? Not determinable from the source.
• Will OneTrust’s 30 September TrustWeek innovation keynote finally substantiate the runtime-enforcement claim first made in the August Summer ‘26 webinar?