Home PC News DataGrail, which helps enterprises manage data privacy requests, raises $30M

DataGrail, which helps enterprises manage data privacy requests, raises $30M

Join Transform 2021 for the most important themes in enterprise AI & Data. Learn more.

DataGrail, a data privacy startup that helps businesses navigate the growing array of privacy regulations around the world, has raised $30 million in a series B round of funding. Alongside the investment, the San Francisco-based company also added a slew of new enterprise customers to its roster, including Databricks, Dexcom, and Twilio.

Founded in 2018, DataGrail constitutes part of a growing roster of platforms that are capitalizing on privacy regulations such as GDPR in Europe and CCPA in California, by making it easier for companies to manage, automate, and grow their privacy programs. For example, many privacy regulations allow end-users (e.g. customers or employees) to request access to their data under a right-of-access stipulation, which is known as a data subject access request (DSAR). Fulfilling such requests can be a labor-intensive process involving collaborations between multiple teams for a single DSAR, given that the average enterprise uses between 50 and 100 different systems for storing personal data. DataGrail enables businesses to automate many of the processes involved in complying with such requests.

“Organizations rely on hundreds of inter-connected apps and infrastructure — SaaS apps, data lakes, hosted databases — making it nearly impossible to find the personal data associated with a single person and comply with privacy laws,” DataGrail cofounder and CEO Daniel Barber told VentureBeat. “DataGrail allows businesses to automatically understand the apps and infrastructure they use, what personal information exists in those systems, and provides the ability for their customer to control how their information is used.”

DataGrail supports more than 900 pre-built integrations across companies’ cloud apps and infrastructure, including AWS, Box, Dropbox, Stripe, Slack, Jira, Salesforce, and Okta. The company also claims to be able to detect personal data inside shadow IT systems — that is, technology that isn’t officially approved by a company for storing customer data.

Companies can complete a DSAR in minutes using Request Manager, according to DataGrail, which instantly identifies where all the data is stored and unifies it in a single online dashboard.

Above: Automated DSAR request management

Moreover, DataGrail makes it possible for companies to automate the specifics of the request. For example, a customer may want to request access to their data, or request that their data be deleted or restricted for sale.

Above: DataGrail: Access or delete?

In terms of integrations, DataGrail said that most of its customers can deploy it in less than 30 days. “The platform detects the apps and infrastructure in use, and discovers the data within those systems via internally built no-code integrations,” Barber said.

But perhaps more than that, DataGrail claims that a major selling point is that it doesn’t use any form of middleware for its integrations — it builds and maintains all the connectors and integrations itself.

Prior to now, DataGrail had raised around $9 million, and with its latest $30 million cash injection the company ushered in a slew of existing and new investors including Felicis Ventures, HubSpot, Okta Ventures, and Next47.


The raise also comes amid a flurry of funding activity across the data privacy landscape, with Privacera just yesterday announcing $50 million in funding, while OneTrust and BigID recently attained a $5 billion and $1 billion valuation respectively following funding rounds. In an increasingly competitive data privacy management world, there are some signs of consolidation too, with OneTrust recently acquiring an AI startup called DocuVision which automatically finds and redacts sensitive data in documents.

DataGrail, for its part, is hoping to set itself apart from the pack by providing what Barber calls a “complete solution.”

“We see modern businesses struggle with the first generation of privacy vendors,” he said. “Existing tools have been bifurcated into either workflow or data discovery. “DataGrail’s integration network of over 900 apps and infrastructure platforms provides the first integrated solution.”


VentureBeat’s mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact.

Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:

  • up-to-date information on the subjects of interest to you
  • our newsletters
  • gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
  • networking features, and more

Become a member

Most Popular

Recent Comments