DoControl
DoControl is a New York-based SaaS data security platform founded in 2020 that provides AI-powered SSPM, DLP, insider risk management, and NHI/AI-asset governance across Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom for enterprise customers via direct field sales, a free risk-assessment funnel, and channel partners.
- Company typePrivate
- Founded2020
- HeadquartersNew York, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What DoControl does
DoControl is a privately held SaaS data security company founded in 2020 and headquartered in New York, with a secondary office in Tel Aviv-Yafo. It sells a unified platform for SaaS Security Posture Management (SSPM), Data Loss Prevention, Insider Risk Management, Identity Threat Detection and Response, and Shadow App / AI Discovery across Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom. The platform is built on an event-driven, agentless architecture hosted on AWS (EventBridge, Kinesis, Lambda, Step Functions) and is differentiated by a patented no-code visual workflow builder and by AI-powered contextual analysis that fuses content, identity, and sharing posture rather than relying on static content scanning. Recent additions include 250+ DLP classifiers, an agentic in-platform AI assistant, Non-Human Identity (NHI) detection, and industry-first governance for Google Gemini Gems.
The company sells exclusively to enterprise customers through direct field sales, supplemented by a free self-service SaaS Risk Assessment (PLG funnel), AWS Marketplace listing, and a channel partner program (e.g., Marubeni I-DIGIO in Japan). Pricing is quote-based annual subscription tied to organization size and SaaS environment scope. Named customers span financial services (Mastercard, KKR, Shift4, Clear), technology (Zscaler, Databricks, Monday.com, Grammarly, Sisense, StackAdapt, Armis, Devo), media (Vox Media, Time Inc), and retail (LiquidDeath, Colgate-Palmolive). The company has raised $43 million in total funding, including a $30 million Series B led by Insight Partners in April 2022, and has been recognized as a Leader in the 2025 Frost & Sullivan SSPM Radar Report and as a Spark Matrix Leader by QKS Group.
Go-to-market is hybrid: enterprise field sales anchor the primary motion, while a free Google Workspace risk assessment, free insider risk health check, and ROI calculator generate top-of-funnel demand. Distribution is being broadened through channel partnerships (notably Japan) and an AWS Marketplace presence. Certifications include SOC 2 Type II, ISO 27001, HIPAA, GDPR readiness, and AICPA SOC, supporting sale into regulated verticals.
DoControl firmographics
Firmographics- Name
- DoControl
- Legal name
- DoControl, Inc.
- Website
- https://docontrol.io
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- DoControl is a New York-based SaaS data security platform founded in 2020 that provides AI-powered SSPM, DLP, insider risk management, and NHI/AI-asset governance across Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom for enterprise customers via direct field sales, a free risk-assessment funnel, and channel partners.
- Ownership category
- akta.pro rank
DoControl industry classification
Industry- Product category
- SaaS Security Posture Management (SSPM)
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Data Privacy, Consent & Compliance Management (HDAEADAG)
Keywords
Where DoControl is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
DoControl business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription: Subscription-based SaaS security platform with recurring annual or multi-year contracts. Enterprise pricing based on usage metrics and parameters specified in Service Entitlement.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with custom pricing based on organization size and SaaS environment complexity |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
DoControl product offering
Product offeringCore offering
DoControl provides an automated SaaS Security Posture Management (SSPM) platform that delivers identity-driven data access monitoring, orchestration, and remediation across business-critical SaaS applications including Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom. The platform combines AI-powered contextual data protection, data loss prevention with 250+ classifiers, insider risk management, shadow app/AI discovery, and SaaS misconfiguration management through a patented no-code visual workflow builder. It enables real-time and bulk remediation of data exposure at scale (millions of permissions) across customer SaaS environments.
Product overview
DoControl offers a unified SaaS data security platform combining identity-driven data security, comprehensive Data Loss Prevention (DLP), automated Insider Risk Management, SaaS Security Posture Management (SSPM), and Shadow App/AI Discovery. The platform is built around five core modules: Data Discovery (for asset and permission visibility), Data Loss Prevention (with 250+ AI-powered classifiers), Identity Risk Management (for behavioral analytics and anomaly detection), Shadow Apps & AI Discovery (for OAuth and non-human identity management), and SaaS Misconfiguration Management (for compliance posture). The platform features a patented No-Code Workflow Builder for automated remediation and supports Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom ecosystems. Additional offerings include a Free Risk Assessment tool and Data-at-Rest Classification capabilities.
Differentiator
Problem solved
Functional benefit
Products and services
- DoControl SaaS Data Security Platform Unified SaaS data security platform that provides identity-driven data security, comprehensive data loss prevention, automated insider risk management, and SaaS Security Posture Management (SSPM). The platform secures sensitive data and files within business-critical SaaS applications through continuous monitoring, contextual AI-powered analysis, and automated remediation workflows. Targeted at enterprise organizations with complex SaaS environments.
- Self-Service Free SaaS Risk Assessment Free self-service tool enabling organizations to instantly assess SaaS data exposure via Google Workspace without vendor engagement. Provides visibility into external sharing risks, sensitive data exposure, and third-party permissions, driving product-led evaluation.
Quantifiable outcome
- 75% reduction in public and external asset exposure
- +5 more outcomes
Companies that use DoControl
Customer profileNamed customers23 records
Segments6 records
Ideal customer profiles3 records
DoControl technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability7 records
Feature8 records
DoControl partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core.
- SentracoreStrategic partnership integrating Sentra's data classification with DoControl's policy enforcement. This enables organizations to automatically act on sensitive data labels, improving real-time data protection across SaaS applications through combined DSPM and DDR capabilities.
- Marubeni I-DIGIOcoreStrategic partnership to provide SaaS security solutions in Japan. Marubeni I-DIGIO serves as channel partner delivering DoControl's automated security controls, monitoring, and compliance support to Japanese enterprises facing increasing SaaS security risks.
- Amazon Web Services (AWS)coreAWS Partner with platform built on AWS infrastructure leveraging EventBridge, Kinesis, Lambda, and Step Functions. AWS Marketplace Seller enabling customers to purchase through AWS agreements.
Scale indicators12 records
Recent moves6 records
Expansion highlights6 records
DoControl competitors and assessment
Company assessmentDirect peers
- AppOmni: AppOmni is a leading SSPM platform that protects SaaS applications (Salesforce, ServiceNow, M365, Google Workspace, Workday) through automated security posture management. It is the most directly comparable pure-play to DoControl, competing for the same enterprise security buyer with overlapping DLP, misconfiguration, and identity-risk capabilities.
- Adaptive Shield: Adaptive Shield was a direct SSPM competitor focused on SaaS security posture and identity threat detection before being acquired by CrowdStrike. It is highly relevant as a same-category peer that ultimately consolidated into a larger platform, illustrating both the strategic value of the SSPM category and the risk of incumbent absorption.
- BetterCloud: BetterCloud is a long-standing SaaS operations and security platform focused on Google Workspace and Microsoft 365 governance, with DLP, lifecycle management, and policy enforcement capabilities. It overlaps with DoControl on SaaS DLP and user lifecycle/insider risk, making it a direct functional peer in the same customer segment.
- Reco: Reco is an SSPM platform that provides SaaS security posture, shadow app discovery, and AI governance across collaboration apps. It competes head-to-head with DoControl in the SSPM category, particularly around AI-era use cases like shadow AI and NHI detection.
- Grip Security: Grip Security is a SaaS security and shadow IT discovery platform that addresses SaaS sprawl, OAuth risk, and identity-led SaaS governance. It is directly comparable to DoControl's Shadow Apps & AI Discovery module and broader identity-driven SaaS security approach.
- Valence Security: Valence Security is a SaaS security platform focused on identity, data, and third-party app risk across SaaS ecosystems, with remediation workflows similar to DoControl's no-code builder. It is a comparable peer targeting the same enterprise CISO buyer.
Broad incumbents
- Netskope: Netskope is a major SASE/CASB vendor with broad SSPM-adjacent capabilities including SaaS security posture, DLP, and inline controls. It represents the broad-incumbent threat: a well-funded platform vendor that can natively absorb SSPM features as part of a wider security portfolio.
- Zscaler: Zscaler is a leading cloud security platform with CASB, SSPM, and ZDX capabilities addressing SaaS security and data protection. It is both a DoControl customer (validating the product) and a competitive incumbent with the resources to bundle comparable capabilities into its broader zero-trust platform.
- CrowdStrike: CrowdStrike is a major endpoint and cloud security platform that acquired Adaptive Shield (SSPM) and is also a DoControl investor and customer. As a strategic incumbent with growing SaaS security capabilities, it represents both a validation of the SSPM market and a significant competitive and investor overlap.
Emerging players
- Cyera: Cyera is a fast-growing DSPM (Data Security Posture Management) platform focused on discovering and classifying sensitive data across cloud environments. It is a meaningful adjacent peer and ecosystem participant, particularly given DoControl's Sentra DSPM partnership and shared enterprise CISO buyer.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights7 records
Customer concentration
DoControl social profiles
Digital presenceDoControl financial estimates
Financial estimateRevenue estimate
Valuation estimate
DoControl leadership team
Management profileNumber of profiles
Profiles3 records
DoControl funding detail
Funding detailFunding overview
Funding rounds3 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DoControl M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DoControl
What does DoControl do?
DoControl provides an automated SaaS Security Posture Management (SSPM) platform that delivers identity-driven data access monitoring, orchestration, and remediation across business-critical SaaS applications including Google Workspace, Microsoft 365, Salesforce, Slack, Box, and Zoom. The platform combines AI-powered contextual data protection, data loss prevention with 250+ classifiers, insider risk management, shadow app/AI discovery, and SaaS misconfiguration management through a patented no-code visual workflow builder. It enables real-time and bulk remediation of data exposure at scale (millions of permissions) across customer SaaS environments.
Is DoControl a public or private company?
DoControl is a private company. It is classified as venture growth investor backed and is currently operating.
When was DoControl founded?
DoControl was founded in 2020. It employs 51 to 100 people.
Where is DoControl based?
DoControl is headquartered in New York, United States, in the North America region.
How does DoControl make money?
One revenue line is on record: saaS Subscription.
Who are DoControl's main competitors?
Direct peers on record are AppOmni, Adaptive Shield, BetterCloud, Reco, Grip Security and Valence Security. Broad incumbents are Netskope, Zscaler and CrowdStrike. Cyera is listed as an emerging player.
Does DoControl have an API?
Yes. DoControl connects to SaaS applications via OAuth tokens and Service Account Domain Wide Delegation to read activity events, file permissions, user info, groups, labels across My Drive and Shared Drive. The platform is built on AWS using Amazon EventBridge, Amazon Kinesis, AWS Step Functions, and AWS Lambda functions for workflow orchestration. DoControl also integrates with customer Identity Providers (IdP) and HRIS systems for employee lifecycle management. Developer documentation is at www.docontrol.io/integrations.
What industry is DoControl in?
DoControl's product category is SaaS Security Posture Management (SSPM). Its primary akta.pro industry code is HDAEADAG, Data Privacy, Consent & Compliance Management. Its NAICS code is 5132 and its SIC code is 7372.