Docontrol

DoControl is a SaaS data security company that helps security teams discover, understand and mitigate risks arising from how corporate data is shared across cloud collaboration applications. Its API-based platform connects to SaaS ecosystems such as Google Workspace, Microsoft 365/SharePoint, Slack, Dropbox, Jira and Salesforce and inventories every asset, user, group, department, domain and connected third-party application, showing how data is exposed internally, externally and publicly.

The platform spans data discovery, data loss prevention, identity risk management, shadow application and AI/non-human identity inventory, and SaaS misconfiguration checks against compliance frameworks. It performs bulk historical remediation of accumulated permissions, detects anomalous user behavior in real time with alerts routed to Slack, email or a SIEM/SOAR, and enriches each event with context pulled from identity providers, HRIS and EDR systems so that risk is scored differently for, say, a finance-group employee, a user about to leave the company, or a non-human AI agent accessing files outside its usual pattern. No-code, drag-and-drop automation workflows trigger remediation, approval steps or end-user notifications based on SaaS events and their metadata.

The company positions this identity- and behavior-aware approach against legacy DLP tooling, which it characterizes as relying on static content scanning and rigid allow/block decisions that both miss time-sensitive exfiltration and block legitimate business sharing. Published use cases include former employees retaining access, sharing to personal email domains, departing employees downloading sensitive files, board files shared publicly, excessive OAuth application access and AI agents bulk-accessing data.

Founding story

DoControl was founded in 2020 in New York City by Adam Gavish, Liel Ran and Omri Weinberg, who took the roles of CEO, CTO and CRO respectively. The premise was that endpoint, network and identity security products do not understand SaaS data models and lack the contextual information needed to detect SaaS threats. Co-founder Omri Weinberg previously served as General Manager USA at SafeDK, which was acquired by AppLovin, was SVP of Performance Marketing at Matomy Media Group, and co-founded GETONIC, a digital goods marketplace that raised $500,000 from The Time VC.

Business model

DoControl sells a software platform to enterprise security organizations. It is deployed via API integrations with the customer's existing SaaS applications rather than agents or new end-user software, and can also be procured and connected through cloud service provider marketplace integrations.

Software sold to enterprise customers; the platform is delivered as a SaaS product and can also be procured through cloud provider marketplaces.

Traction

Reference customers cited on the company's site include Vox Media, Sisense, StackAdapt, Unqork, Devo and Armis. One customer reported bulk remediating 800,000 excessive sharing instances and reducing external Gmail sharing by roughly 66%. At the time of the Series B, the company said it had raised $45 million within 22 months of founding and had grown from three founders to more than 50 employees.

Latest developments

Recent company publishing focuses on AI-era collaboration risk, including coverage of non-human identities and AI agents accessing and externally sharing sensitive files, SaaS access control best practices, bulk removal of Google Drive sharing permissions, and the argument that data security forms the foundation of an AI security program. The product line now spans data discovery, DLP, identity risk management, shadow apps and AI, and misconfiguration management, with a free SaaS risk assessment offered as an entry point.