Show Notes
When Tim Freestone first logged into ChatGPT on November 23, 2022, he turned to his wife and said, “Okay, this is a thing.” Two and a half years later, he's the Chief Strategy Officer at Kiteworks, a PE-backed unicorn protecting how data moves in and out of the world's most regulated companies. This episode is part jazz appreciation, part AI philosophy, and part hard-earned playbook for any founder staring down the agentic era wondering whether their data exposure is about to catch up with them.
Tim's path is the kind founders should pay attention to. He spent the early part of his career writing grants for a performing arts college, then bootstrapped a New York marketing agency from zero to fifty employees and nearly ten million in revenue across a decade. The throughline was always building systems, and when AI collapsed the gap between intent and outcome, he went all in. A year ago he didn't know what a CLI was. Now he has more terminal tabs open than browser tabs.
Kiteworks itself is a study in repositioning. The company spent fifteen years as Accellion, a secure file transfer business that had commoditized into a struggling thirty-million-dollar revenue line. Then current CEO Jonathan Yaron, a veteran of Israel's elite 8200 unit, saw signal where others saw stagnation. He expanded the platform to cover every channel through which data enters and exits an organization: file share, email, managed file transfer, APIs, secure protocols. Tim arrived as CMO five years ago, recognized the brand confusion between Accellion and its Kiteworks platform, and convinced Yaron to elevate the product name to the company name.
The rebrand stuck. The vision expanded. And now, in the age of agents, that same control plane is being extended to govern how AI systems access and move enterprise data. For founders in regulated industries — or any company handling PII, PHI, or CUI — the clock Tim describes is already running.
Frameworks from This Episode
The Intent-Data Layer Framework
SaaS built its moat by sitting between human intent and data. AI is dissolving that moat — and opening the data layer to anyone who knows how to ask.
- •SaaS historically sat as a complex translation layer between human intent and data.
- •Entire job titles formed around mastering specific software stacks — Salesforce admins, Marketo specialists, and so on.
- •AI strips out the complexity layer entirely, letting natural language bridge intent and data directly.
- •This democratizes data leverage for good actors and bad actors alike.
- •The strategic implication: protection must move down to the data layer itself, not the software layer.
The Control Plane for Data Model
Every security layer in the traditional stack exists to protect data. None of them control it directly. Kiteworks' thesis is that control must live at the data itself.
- •Traditional security stacks operate at the perimeter, cloud, and endpoint layers.
- •All of those layers exist to protect data, but none control data movement directly.
- •Kiteworks operates at the data layer, mapping individual assets to individual agents.
- •Yes/no permissions on access, sharing, and use — asset by asset, agent by agent.
- •This permission matrix becomes the compliance infrastructure companies need in agentic workflows.
The Regulator Doesn't Care Principle
Regulators don't grade on a curve for AI. Data exposure penalties apply whether the culprit was a human, an agent, or — as Tim puts it — an orangutan typing at a keyboard.
- •Data exposure penalties apply regardless of cause: human error, agent action, or any other vector.
- •PII, PHI, and CUI regulations remain in force even as agent-specific regulations lag behind adoption.
- •Companies will face audits in 12+ months on agent activity that is happening today.
- •The insurance policy: instrument controls now, before the legislative wave catches up.
The Failure-as-Muscle Framework
Muscles have to be pushed to failure to grow. Tim applies the same logic to organizational culture: failures, handled well, are the mechanism of compound learning.
- •Failures should be encouraged the way muscles must be pushed toward failure to grow.
- •Insecure leaders pour gasoline on others' mistakes to distract from their own gaps.
- •Strong organizations normalize mistakes as part of the operating system.
- •Mentorship is less about seeking mentees and more about transparently sharing the lessons that informed every current decision.
Founder Experiment: Build a Family Logistics Agent
Tim built a personal AI assistant his wife uses to handle the daily logistics of two teenage daughters: who's picking up whom, when football practice starts, when dad flies to New York. Replicate it.
- 1Spin up a Claude API integration that ingests your shared calendar via Google Calendar MCP.
- 2Add your text message threads with co-parents or partners — manual paste is fine to start.
- 3Connect a simple Notion or Google Doc that tracks recurring obligations.
- 4Use Claude Code or Cursor to scaffold a CLI tool that takes natural language queries like "what's happening Thursday?" or "who's dropping off Emma tomorrow?" and returns a synthesized answer with source citations from your calendar and notes.
- 5Ship the MVP in a weekend, then iterate based on the actual queries you and your partner ask.
The point isn't the productivity gain. The point is feeling firsthand how natural language collapses the intent-to-data gap that Tim describes — which trains your strategic instinct for everything else you're going to build.
Key Terms
Tools from This Episode
Kiteworks
The control plane for sensitive data movement. Kiteworks unifies email, file share, managed file transfer, APIs, and secure protocols under a single governance layer — now extended to govern how AI agents access and move enterprise data in regulated environments.
Q&A
What does Kiteworks do?
Kiteworks operates as the control plane for data moving in and out of organizations. The platform unifies email, file share, managed file transfer, APIs, and secure file transfer protocols under a single policy layer, with extended capabilities to govern AI agent access to enterprise data.
Is Kiteworks venture-backed or private equity-backed?
Kiteworks is private equity-backed by Sixth Street and Insight Partners. Tim notes the cultural difference: PE conferences feature late-forties veteran operators, while VC conferences skew younger and higher-energy.
Why did Accellion rebrand to Kiteworks?
The company had built a platform called Kiteworks that the market was confusing as a competitor to Accellion. Tim, then CMO, recognized that Kiteworks had stronger brand equity and convinced CEO Jonathan Yaron to elevate the product name to the company name.
What's the connection between the 8200 unit and Kiteworks?
Both CEO Jonathan Yaron and Chief Product Officer Yaron Galon came from Israel's 8200 signals intelligence unit. Yaron Galon was part of the team that invented the Web Application Firewall.
Who should consider Kiteworks?
Companies in highly regulated industries — financial services, legal, healthcare — federal contractors, and any company in the federal information supply chain. The more regulated the data, the higher the urgency.
When did Tim Freestone start working with AI?
November 23, 2022, the week ChatGPT launched. He logged in, turned to his wife, and said 'Okay, this is a thing.' He has been using AI tools daily since.
