Is this only for large regulated organizations?

Smaller organizations often assume governance is a large-enterprise concern, when the exposure is proportionally similar — the same regulated categories, the same discovery obligations, with less capacity to absorb an incident.

Centralpoint runs at 65 enterprise accounts across government, healthcare and commercial sectors, and the governance mechanism is the same at any scale: classification during ingestion, entitlement on records, rules with owners, an audit surface. What changes with size is the volume of content and the number of populations, not the pattern.