Balaji Ganesan

Co-Founder and CEO Trust3 AI by Privacera

Last Reviewed: September 19, 2026

Executive Summary

Balaji Ganesan has now built the same company twice, each time one layer up the stack. With Don Bosco Durai he founded XA Secure to solve access control and governance for Hadoop-era big-data environments; Hortonworks acquired it and gave the technology to the Apache Software Foundation, where it became Apache Ranger — still the primary centralized authorization framework for open-source big-data systems, and one of the few pieces of that generation’s infrastructure that remains load-bearing. The two then founded Privacera to do the same job for the multi-cloud era, enforcing consistent policy over sensitive data spread across AWS, Azure, GCP, Databricks, Snowflake and Starburst rather than a single Hadoop cluster. The company now trades as Trust3 AI by Privacera and has extended the argument again: its position is that traditional data governance was not built for AI and that AI tools do not understand data policies, so it sells a Data Governance Agent and an AI Governance Agent intended to apply one trust layer across both. Ganesan is chief executive; Durai is chief technology officer.

Career Highlights

• Co-founded XA Secure with Don Bosco Durai, building access control and governance for big-data environments.
• XA Secure was acquired by Hortonworks, which contributed the product to the Apache Software Foundation, where it became Apache Ranger.
• Led the security and governance team at Hortonworks after the acquisition, during a stretch in which he says the company went from fewer than 100 customers to more than 800 in a little over two years.
• Co-founded Privacera and has led it as chief executive ever since, extending fine-grained access control across the major clouds and data platforms.
• Oversaw the company’s repositioning as Trust3 AI by Privacera, pairing data governance with governance of LLM and agentic workflows.
• Built a board drawing on Insight Partners, Cervin and Accel.
• Contributes regularly to security trade press, including Dark Reading and CPO Magazine.

Professional Journey

Ganesan describes himself as a self-starting technology executive with more than fifteen years spent building startups and running large transformation teams, and he came to security through the data side of the problem rather than the perimeter.

His first venture with Don Bosco Durai was XA Secure, addressing a gap that had opened as enterprises moved workloads onto Hadoop: the data was now centralised and enormous, and there was no coherent way to say who could see which parts of it. Hortonworks acquired the company and did something unusual with the asset — rather than keeping it proprietary, it contributed the technology to the Apache Software Foundation. It became Apache Ranger, and by making the authorization layer open it became the default across the ecosystem rather than one vendor’s option. That decision is why Ganesan’s first company is still visible in production systems years after it stopped existing as a company.

He stayed at Hortonworks after the acquisition, leading its security and governance team and working with enterprises on governance and security programmes. He has said the company grew from fewer than a hundred customers to more than eight hundred in a little over two years during that period — a claim from his own self-authored professional profile rather than an audited figure, but consistent with Hortonworks’ trajectory at the time.

Privacera followed, founded with Durai again and dated by secondary profiles to 2016. The thesis was that the Ranger model had been right and the environment had changed: data no longer sat in one cluster but was scattered across cloud object stores, warehouses and lakehouses, each with its own permission model. Privacera’s answer was a centralised policy layer spanning AWS, Azure, GCP, Databricks, Snowflake and Starburst, so that a rule about sensitive data could be written once and enforced everywhere. The company attracted institutional backing, and its board seats Praveen Akkiraju of Insight Partners, Shirish Sathaye of Cervin and Eric Wolford of Accel.

Asked what he had learned as a repeat founder, Ganesan has been careful not to over-generalise, noting that “every startup is very different, with varied market dynamics, team, and even the customer base” — a rejection of the idea that the second company is the first one run better.

The most recent move is the rebrand to Trust3 AI by Privacera. The framing is that governance and AI have been pulling in opposite directions — governance tooling predates AI and does not understand it, while AI tooling has no visibility into an organisation’s data policies — and that the fix is to close the gap with agents on both sides: a Data Governance Agent that discovers, classifies and protects sensitive data with fine-grained access control, and an AI Governance Agent that enforces policy and provides auditability over LLM and agentic workflows. It is the same instinct that produced XA Secure and Privacera, applied to the layer that has just become load-bearing.

Education

No education record was found. Privacera’s own leadership page publishes no educational background for any of its executives, his Forbes Business Council profile gives none, and an investor interview that covers his founding history explicitly contains no academic credentials. A postgraduate management qualification is claimed in aggregated search results but could not be traced to any citable source, so nothing is recorded here rather than repeating an unverified claim.