Datadobi today announced that it has once again received its Service Organization Control (SOC) 2 Type I attestation covering its software engineering, quality assurance, security, operations, and support processes, following an independent audit by KPMG. Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a widely recognized framework for assessing how service organizations protect customer data. The attestation confirms that Datadobi’s internal controls and processes continue to meet the highest standards for the integrity, security, and confidentiality of customer data.
With unstructured data growing exponentially in recent years, the challenge of managing it is accelerating at an ever-increasing pace. IT and business organizations are moving data for system upgrades, to take advantage of the cloud, for cost or compliance reasons, and to prepare data for AI, analytics, and research. The race to get unstructured data ready for AI raises the stakes further: data feeding AI models, retrieval pipelines, and agents must be complete, uncorrupted, and properly governed, because errors or exposures at this stage are amplified in every output that follows. Throughout these processes, data integrity must be protected against human and machine error as well as malicious attacks. That puts the spotlight not only on the software organizations rely on to manage their data, but on the engineering, security, and operational discipline of the vendor behind it.
The SOC 2 Type I report reaffirms Datadobi’s company-wide commitment to data integrity, security, and software quality, giving organizations confidence that the data they move, manage, and prepare for AI is handled under rigorous, independently audited controls. It provides an in-depth look at the internal controls and processes that govern how Datadobi builds, tests, releases, and supports its software, including:
Secure, Defensive Software Engineering
A defensive engineering methodology is embedded across Datadobi’s software development lifecycle. All code is deployed following a four-eyes principle, and every code change is peer reviewed and passes extensive automated testing before it is included in a release. An agile release methodology means Datadobi’s software can be adapted quickly to customer-specific needs or interoperability challenges, without compromising quality or control.
Independent Quality Assurance (QA) Function
Datadobi maintains a QA function that operates independently of development to verify the quality of every release. If an issue is identified in a customer environment, it is investigated, and a software patch is provided to resolve it. A root cause analysis then determines whether any process, test, or architectural change is needed, so that lessons learned feed back into how all Datadobi software is built.
Risk Assessment and Governance
Datadobi applies a formal risk-control matrix across the business to evaluate risks and the controls in place to mitigate them. The matrix is regularly reviewed by Datadobi’s management and product management teams, ensuring security and data protection remain leadership priorities embedded in day-to-day operations.
Training, Support, and Customer Guidance
Datadobi trains customers and partners to use its software effectively in complex, multi-vendor environments and supports them at every stage of a project, from planning and pre-cutover testing to dry runs, cutover, and verification. Customers also have access to an extensive knowledge base of storage interoperability guidance and best practices, along with chain-of-custody reporting that documents how their data has been handled.
To learn more about Datadobi’s service commitments and obtain the available SOC 2 Type I report, visit https://datadobi.com/kpmg/
Related
This entry was posted on November 2, 2026 at 10:57 am and is filed under Commentary with tags Datadobi. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Datadobi Receives SOC 2 Type I Attestation from KPMG for Its Software Engineering, Quality, and Security Processes
Datadobi today announced that it has once again received its Service Organization Control (SOC) 2 Type I attestation covering its software engineering, quality assurance, security, operations, and support processes, following an independent audit by KPMG. Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a widely recognized framework for assessing how service organizations protect customer data. The attestation confirms that Datadobi’s internal controls and processes continue to meet the highest standards for the integrity, security, and confidentiality of customer data.
With unstructured data growing exponentially in recent years, the challenge of managing it is accelerating at an ever-increasing pace. IT and business organizations are moving data for system upgrades, to take advantage of the cloud, for cost or compliance reasons, and to prepare data for AI, analytics, and research. The race to get unstructured data ready for AI raises the stakes further: data feeding AI models, retrieval pipelines, and agents must be complete, uncorrupted, and properly governed, because errors or exposures at this stage are amplified in every output that follows. Throughout these processes, data integrity must be protected against human and machine error as well as malicious attacks. That puts the spotlight not only on the software organizations rely on to manage their data, but on the engineering, security, and operational discipline of the vendor behind it.
The SOC 2 Type I report reaffirms Datadobi’s company-wide commitment to data integrity, security, and software quality, giving organizations confidence that the data they move, manage, and prepare for AI is handled under rigorous, independently audited controls. It provides an in-depth look at the internal controls and processes that govern how Datadobi builds, tests, releases, and supports its software, including:
Secure, Defensive Software Engineering
A defensive engineering methodology is embedded across Datadobi’s software development lifecycle. All code is deployed following a four-eyes principle, and every code change is peer reviewed and passes extensive automated testing before it is included in a release. An agile release methodology means Datadobi’s software can be adapted quickly to customer-specific needs or interoperability challenges, without compromising quality or control.
Independent Quality Assurance (QA) Function
Datadobi maintains a QA function that operates independently of development to verify the quality of every release. If an issue is identified in a customer environment, it is investigated, and a software patch is provided to resolve it. A root cause analysis then determines whether any process, test, or architectural change is needed, so that lessons learned feed back into how all Datadobi software is built.
Risk Assessment and Governance
Datadobi applies a formal risk-control matrix across the business to evaluate risks and the controls in place to mitigate them. The matrix is regularly reviewed by Datadobi’s management and product management teams, ensuring security and data protection remain leadership priorities embedded in day-to-day operations.
Training, Support, and Customer Guidance
Datadobi trains customers and partners to use its software effectively in complex, multi-vendor environments and supports them at every stage of a project, from planning and pre-cutover testing to dry runs, cutover, and verification. Customers also have access to an extensive knowledge base of storage interoperability guidance and best practices, along with chain-of-custody reporting that documents how their data has been handled.
To learn more about Datadobi’s service commitments and obtain the available SOC 2 Type I report, visit https://datadobi.com/kpmg/
Share this:
Like this:
Related
This entry was posted on November 2, 2026 at 10:57 am and is filed under Commentary with tags Datadobi. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.