Cloud Access Security Broker (CASB)
A security control that sits between enterprise users and cloud services to apply visibility, access, data-security and threat-protection policies.
Full Definition
A Cloud Access Security Broker (CASB) proxies or API-integrates with sanctioned and unsanctioned SaaS services to inspect user activity and enforce policy. The four pillars Gartner originally defined — visibility (who is using which cloud apps), compliance (does their use satisfy relevant regulation), data security (DLP across cloud sources), and threat protection (detecting anomalies and compromised accounts) — remain the baseline capability set.
For a privacy programme, CASBs sit next to the data-mapping stack: they detect shadow IT and shadow SaaS where personal data flows outside the sanctioned stack, apply DLP rules to cloud-stored data, and feed consent and purpose metadata into the broader governance layer. In the current security stack, CASBs are converging with SSE / SASE and DSPM — look for a tool that gives you both activity-layer control (CASB) and data-layer visibility (DSPM) rather than siloed point products.
Related terms
Shadow IT
Applications, services or systems used within an organisation without the knowledge or approval of its IT and security functions.
Data Loss Prevention (DLP)
Technologies and policies that detect and block the unauthorised movement of sensitive personal data out of controlled environments.
Data Security Posture Management (DSPM)
A tooling category that continuously discovers personal and sensitive data across cloud environments, classifies it, maps who has access, and surfaces security risk.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.
Free 14-day trial · No credit card required · Setup in minutes