GovernAtlasSubmit your product ↗
Discover platforms/Dataiku

GOVERNATLAS / PRODUCT DOSSIER

Dataiku

Dataiku describes model registries, approval workflows, lineage and performance monitoring within its enterprise AI platform.

Explore the product ↗Add to comparison ↗

01 / CONTEXT & SCOPE

Understand the proposition.
Define the boundary.

The decision to make

Dataiku describes model registries, approval workflows, lineage and performance monitoring within its enterprise AI platform.

What this record does not establish

Published assertions describe their source’s stated scope. They do not establish independently tested performance, certification or suitability for your organization.

2 current sources · 4 published assertions
Source coverage is a research boundary, not a quality score.

03 / DOCUMENTED EVIDENCE

Read the claim. Inspect the basis.

Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.

01
vendor asserted

Dataiku's privacy documentation distinguishes customer-operated installations from Dataiku Cloud, where it describes a processor role and a DPA. Buyers must assess the chosen deployment and any support or integration data flows; the distinction does not establish lawful processing or executed customer terms.

Source, dates & preserved provenanceDataiku — Product capabilities and published scope ↗

Authority: vendor owned
Observed 2026-11-03 · Reviewed 2026-11-03 · current until 2026-12-03

Artifact SHA-256: 9934f1d19259000f7e0e4181bcfdf9faa73a3fed3fd3fcea8234d97c9f0749b5

The hash identifies the preserved capture. The live source may have changed.

02
vendor asserted

Dataiku's trust page states ISO 27001:2022 certification of its ISMS. GovernAtlas has not validated the certificate with its issuer or reviewed its precise entity, location, service and expiry scope. ISMS certification is not certification of a customer's models or deployment.

Source, dates & preserved provenanceDataiku — Product capabilities and published scope ↗

Authority: vendor owned
Observed 2026-11-03 · Reviewed 2026-11-03 · current until 2026-12-03

Artifact SHA-256: 9934f1d19259000f7e0e4181bcfdf9faa73a3fed3fd3fcea8234d97c9f0749b5

The hash identifies the preserved capture. The live source may have changed.

03
vendor asserted

Dataiku states that it has completed SOC 2 Type II assessments and directs customers to an account representative for the report. GovernAtlas has not reviewed the report's period, opinion, exceptions or service coverage; the statement does not establish assurance for every self-managed deployment.

Source, dates & preserved provenanceDataiku — Product capabilities and published scope ↗

Authority: vendor owned
Observed 2026-11-03 · Reviewed 2026-11-03 · current until 2026-12-03

Artifact SHA-256: 9934f1d19259000f7e0e4181bcfdf9faa73a3fed3fd3fcea8234d97c9f0749b5

The hash identifies the preserved capture. The live source may have changed.

04
vendor asserted

Dataiku describes model registries, approval workflows, lineage and performance monitoring within its enterprise AI platform. Scope: vendor documentation only; edition and availability boundaries require confirmation.

Source, dates & preserved provenanceDataiku — official product or documentation page ↗

Authority: vendor owned
Observed 2026-10-15 · Reviewed 2026-10-15 · current until 2026-11-14

Artifact SHA-256: b2a37de634ca2694c255807ed3f5a79f6f5a80be3e3f3790a076ce942365d002

The hash identifies the preserved capture. The live source may have changed.

Source register

Brand asset provenance

Organization identity asset from its official website; inclusion does not imply endorsement.

Official website ↗ · Original asset ↗

04 / BEFORE YOU COMMIT

Better questions.
A clearer decision.

Resolve these with the provider and your own evaluation team.

01

Which governance controls cover systems outside Dataiku and which depend on a separate module?

02

What deployment, data retention and access-control evidence applies to the intended use?

03

Which underlying assurance documents are available for inspection?

Regulatory applicability requires a separate, current determination. Inclusion is not certification.

COMPLIANCE / CLAIMS, SCOPE & GAPS

Start with the requirement.
Inspect the support.

Prepare your vendor review ↗

These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.

GDPR

Published mention available

EU personal data protection

Data-processing documentation

Reconcile Cloud versus self-managed roles, DPA scope, support access, regions, subprocessors and retention before ingesting personal data.

Read the source-attributed statement

Dataiku's privacy documentation distinguishes customer-operated installations from Dataiku Cloud, where it describes a processor role and a DPA. Buyers must assess the chosen deployment and any support or integration data flows; the distinction does not establish lawful processing or executed customer terms.

vendor asserted

Dataiku — Product capabilities and published scope ↗

Explore GDPR evidence ↗

SOC 2

Published mention available

Assurance report · not a law

Vendor-reported assurance

Request the current report and map its system boundary to Cloud versus installed software and the controls remaining with your team.

Read the source-attributed statement

Dataiku states that it has completed SOC 2 Type II assessments and directs customers to an account representative for the report. GovernAtlas has not reviewed the report's period, opinion, exceptions or service coverage; the statement does not establish assurance for every self-managed deployment.

vendor asserted

Dataiku — Product capabilities and published scope ↗

Explore SOC 2 evidence ↗

ISO 27001

Published mention available

Information security management standard

Vendor-reported assurance

Inspect the current certificate and scope statement, then reconcile purchased services, hosting arrangements and responsibilities.

Read the source-attributed statement

Dataiku's trust page states ISO 27001:2022 certification of its ISMS. GovernAtlas has not validated the certificate with its issuer or reviewed its precise entity, location, service and expiry scope. ISMS certification is not certification of a customer's models or deployment.

vendor asserted

Dataiku — Product capabilities and published scope ↗

Explore ISO 27001 evidence ↗

For HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.

KEEP THE RECORD USEFUL

A dossier should stand up to scrutiny.

Have a source that changes this picture? Submit it for editorial review.

Raise an evidence issue ↗