Snowflake buys Natoma to help freeze out rogue agents

AI + ML

It is the database titan’s sixth acquisition announcement since June 2025

It's 8 pm. Do you know where your agents are? Snowflake plans to buy Natoma, a startup that has made a gateway for managing AI agent permissions across enterprise applications, so users can focus on getting work done without wondering if their agents have violated security policies.

During Snowflake's first-quarter fiscal 2027 earnings call, company CEO Sridhar Ramaswamy said Natoma is a critical piece of the company's broader strategy around what he called the "agentic control plane," where AI agents can take actions across business systems while still operating within the organization’s security controls. 

"With Natoma, users can do things like send emails, summarize Slack conversations, check calendars, and open Jira tickets without ever leaving Snowflake Intelligence or Coco," Ramaswamy said during the call, referring to two of Snowflake's AI products. “The important point is not just convenience. It is control. These actions happen from a governed environment with enterprise security, permissions, observability, and policy enforcement built in.” 

Natoma’s software acts as a gateway for Model Context Protocol (MCP) servers, connectors that allow AI agents to interact with external software tools. The platform enforces identity verification, access policies, and audit controls at the level of individual tool calls, tracking who requested an action, what permissions they hold, and whether the system should allow the action to proceed.

“The reason MCP and Natoma are a big deal is they now bring the entirety of SaaS application context into these products, and so I've done deep research reports, for example, that can now look for information from Snowflake, from the web, from Google Docs, also from Slack, and synthesize that into something that is astoundingly meaningful,” Ramaswamy said. “And these also let you take action instantly. You can flag somebody, you can compose emails and send it, and you can take actions on the underlying applications, and that's the promise.” 

In a blog post, Natoma's four founders — Pratyus Patnaik, Will Potter, Zachary Hart, and Paresh Bhaya — said Natoma brings the secure connectivity, identity, and governance layer that helps Snowflake experiences extend safely into the applications their teams already use. 

"We started Natoma in 2024 with a simple belief: AI agents would fundamentally change how work gets done inside enterprises, but they would only reach production if organizations could trust and control how those agents access data, use tools, and take action," they wrote. "Snowflake sees the same future we’ve been building for at Natoma: enterprises need a trusted control plane for the agentic era. They need AI grounded in their own data, governed by their own policies, and connected to the full complexity of their technology stacks." 

Financial terms of the acquisition were not announced. If it passes customary regulatory and closing conditions, the deal would bring 20 employees to Snowflake. 

This is Snowflake's sixth acquisition announcement since June 2025, when it said it would buy PostgreSQL provider Crunchy Data for what a source told CNBC was $250 million.

In November 2025, Snowflake announced that it would buy database migration outfit Datometry and data discovery platform Select Star. No sale price was provided for either transaction. In January, Snowflake said that it would buy Observe, an AI-powered observability platform, for $1 billion. The next month, Snowflake said that it planned to buy TensorStax, an AI-powered data pipeline planner.

The Natoma deal was announced the same day that Snowflake signed a five-year, $6 billion agreement with AWS centered on Graviton-powered compute and AI infrastructure for its growing agentic AI ambitions. 

During the earnings call, Ramaswamy said that the acquisition pushes Snowflake's agentic control plane beyond data and development workflows into everyday applications where work actually happens. 

He said that Natoma's integration would allow Snowflake's Cortex Code, also known as “Coco,” and Snowflake Intelligence products to become a single interface for daily tasks including querying enterprise data, updating CRM records, searching across file storage, and managing communications. 

"These actions happen from a governed environment with enterprise security, permissions, observability, and policy enforcement built in," Ramaswamy said.

Mayank Upadhyay, chief security and trust officer and VP of engineering at Snowflake, wrote in a blog post announcing the Natoma deal that the tool summarizes his unread emails, searches across Slack and Google Drive when he cannot remember where something was shared, and surfaces what he needs without switching between applications.

He described the Natoma acquisition as a continuation of work Snowflake started earlier in the year with AI guardrails and prompt injection protection, building toward what he said was a portfolio for a more secure enterprise AI.®