Datadobi today announced the general availability of Data Access Governance (DAG) within StorageMAP. The new capability gives organizations visibility into who has access to their unstructured data and whether that access aligns with corporate policy. It extends Datadobi’s ability to help enterprises discover, align, and operationalize data across fragmented environments as their intelligence and orchestration layer. As AI initiatives, cyber threats, and rising data complexity expose the limits of traditional approaches, DAG addresses a critical gap: organizations cannot govern, protect, or extract value from data they cannot see or control. As AI initiatives, cyber threats, and rising data complexity expose the limits of traditional approaches, DAG addresses a critical gap: organizations cannot govern, protect, or extract value from data they cannot see or control.
StorageMAP’s DAG capability gives administrators comprehensive visibility into access permissions across fragmented unstructured data environments. By surfacing who has access to what data, and whether that access aligns with business and security policy. Organizations can detect misaligned permissions, reduce cyber exposure, and enforce governance at scale. This visibility is the essential first stage of the broader DSMS discipline — visibility, understanding, decision, execution — that determines whether organizations can act on their data with confidence.
The introduction of DAG extends StorageMAP’s existing capabilities across data discovery, classification, risk assessment, lifecycle management and AI Data Readiness. Together, these capabilities help organizations to discover what data they have, align it with business value and risk requirements, and operationalize policy-driven action across their environments. The result is unstructured data that supports AI initiatives, strengthens cyber resilience, reduces cost, and drives long-term business value rather than holding it back.
DAG, which was trialed by a number of beta customers, supports a range of enterprise use cases, from protecting sensitive data and reducing breach impact, to maintaining records compliance and managing risk through mergers, acquisitions, and divestitures. Early access customers identified a gap in their understanding of which critical datasets were exposed and who could access them, often relying on manual investigation to respond to audits and security incidents. With Datadobi’s DAG capabilities, these organizations quickly identify overexposed data and validate access controls to proactively strengthen their security posture. For organizations investing in AI, it provides the governance foundation that trusted, well-governed data requires. And for those subject to data protection regulations (such as GDPR, HIPAA, or PCI DSS), it delivers the visibility needed to demonstrate that access controls are in place, operating as intended, and aligned with business policy.
Datadobi Receives SOC 2 Type I Attestation from KPMG for Its Software Engineering, Quality, and Security Processes
Posted in Commentary with tags Datadobi on November 2, 2026 by itnerdDatadobi today announced that it has once again received its Service Organization Control (SOC) 2 Type I attestation covering its software engineering, quality assurance, security, operations, and support processes, following an independent audit by KPMG. Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a widely recognized framework for assessing how service organizations protect customer data. The attestation confirms that Datadobi’s internal controls and processes continue to meet the highest standards for the integrity, security, and confidentiality of customer data.
With unstructured data growing exponentially in recent years, the challenge of managing it is accelerating at an ever-increasing pace. IT and business organizations are moving data for system upgrades, to take advantage of the cloud, for cost or compliance reasons, and to prepare data for AI, analytics, and research. The race to get unstructured data ready for AI raises the stakes further: data feeding AI models, retrieval pipelines, and agents must be complete, uncorrupted, and properly governed, because errors or exposures at this stage are amplified in every output that follows. Throughout these processes, data integrity must be protected against human and machine error as well as malicious attacks. That puts the spotlight not only on the software organizations rely on to manage their data, but on the engineering, security, and operational discipline of the vendor behind it.
The SOC 2 Type I report reaffirms Datadobi’s company-wide commitment to data integrity, security, and software quality, giving organizations confidence that the data they move, manage, and prepare for AI is handled under rigorous, independently audited controls. It provides an in-depth look at the internal controls and processes that govern how Datadobi builds, tests, releases, and supports its software, including:
Secure, Defensive Software Engineering
A defensive engineering methodology is embedded across Datadobi’s software development lifecycle. All code is deployed following a four-eyes principle, and every code change is peer reviewed and passes extensive automated testing before it is included in a release. An agile release methodology means Datadobi’s software can be adapted quickly to customer-specific needs or interoperability challenges, without compromising quality or control.
Independent Quality Assurance (QA) Function
Datadobi maintains a QA function that operates independently of development to verify the quality of every release. If an issue is identified in a customer environment, it is investigated, and a software patch is provided to resolve it. A root cause analysis then determines whether any process, test, or architectural change is needed, so that lessons learned feed back into how all Datadobi software is built.
Risk Assessment and Governance
Datadobi applies a formal risk-control matrix across the business to evaluate risks and the controls in place to mitigate them. The matrix is regularly reviewed by Datadobi’s management and product management teams, ensuring security and data protection remain leadership priorities embedded in day-to-day operations.
Training, Support, and Customer Guidance
Datadobi trains customers and partners to use its software effectively in complex, multi-vendor environments and supports them at every stage of a project, from planning and pre-cutover testing to dry runs, cutover, and verification. Customers also have access to an extensive knowledge base of storage interoperability guidance and best practices, along with chain-of-custody reporting that documents how their data has been handled.
To learn more about Datadobi’s service commitments and obtain the available SOC 2 Type I report, visit https://datadobi.com/kpmg/
Leave a comment »