Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Qostodian is a SaaS data security platform that provides continuous visibility, control, and intelligence over sensitive data across unstructured data sources. It operates using a zero copy architecture, ensuring data remains in its original location at all times.
The platform offers organization-specific sensitive data discovery and classification, risk analytics, policy enforcement, reporting, and automation. Users can interact with the platform and derive risk insights and reporting using natural language.
Show the rest of the publisher’s description (1 more line)
Built for enterprise, Qohash has attained external certifications for SOC 2, ISO 27001, and ISO 42001. See trust.qohash.com for a complete list of external assessments and certifications.
Highlights
Highlighted by the publisher on AWS Marketplace.
Zero copy architecture - data remains in your security production environment and complete coverage (no sampling) - eliminate transfers, reduce exposure, and remove dependencies on centralized infrastructure and associated costs
Unified visibility across data, users, and LLMS - enable safe AI adoption by addressing data risk at the source and applying policies to AI use - gain real-time visibility into data access and exposure across all environments - correlate activity from LLMs, cloud, file servers, and workstations
Trusted by clients in highly regulated industries - Certified to the highest standards for reliability and security of information under SOC and ISO - Supply chain integrity, including the highest levels under Supply-chain Levels for Software Artifacts (SLSA) v1.2
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment
Plans and pricing as listed
2 listed- Units
- Units
Refund terms
As stated by the publisher on AWS Marketplace.
Please refer to https://qohash.com/terms/ for complete payment and refund terms.
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.