DataGrail
DataGrail is a San Francisco-based data privacy platform founded in 2018 by Daniel Barber and Ignacio Zendejas that helps enterprises automate privacy operations and manage regulatory compliance risk across GDPR, CCPA, and other global privacy regimes. The platform combines a Live Data Map for real-time visibility into where personal data lives across an organization's SaaS and cloud footprint, a Request Manager for orchestrating Data Subject Requests (access, deletion, opt-out) across thousands of downstream systems, a Consent solution for cookie and tracker compliance with automated enforcement, a Risk Management module for privacy and AI risk assessments (PIA, DPIA, AI risk), and an embedded agentic AI named Vera that surfaces context-aware recommendations across the platform. DataGrail exposes a documented public REST API at /api/v2 covering authentication, assessments, privacy requests, opt-out requests, integrations, webhooks, integration files, and consent audit logs, alongside an open-source ecosystem on GitHub that includes mobile Consent SDKs for iOS and Android, a Google Tag Manager consent template, and a Terraform AWS ECS module for deploying Request Manager Agents. The company serves enterprise customers including Salesforce, HubSpot, Okta, Netgear, and Dexcom, advertises 2,000+ pre-built integrations across CRM, marketing, communications, HR, data, e-commerce, and support platforms, holds patents on its Live Data Map and Smart Verification technology, is SOC 2 and ISO certified, and is backed by Felicis Ventures, HubSpot Ventures, Okta Ventures, Basis Set Ventures, Cloud Apps Capital, Operator Collective, Thomson Reuters Ventures, and Third Point Ventures.
DataGrail is profiled on the APIs.io network. Tagged areas include Privacy, Privacy Operations, Compliance, GDPR, and CCPA.
DataGrail’s developer surface includes documentation, API reference, status page, changelog, engineering blog, GitHub presence, support, and 9 more developer resources.
Kin Score
Kin Score
How this is scored →scored 2026-11-06 · rubric v0.27.0
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/datagrail/"><img src="https://apis.io/badge/datagrail/card.svg" alt="DataGrail on APIs.io — Kin Score by API Evangelist"></a>Other styles, a README pill and a shields.io endpoint are on the badge page.
- Machine-Readable Contract +18 pts — api_specs includes an OpenAPI document
- Agentic Access Contract +10 pts — agentic_access artifact present (x-agentic-access), graded by author
- Machine-Readable Auth +10 pts — a served openid-configuration/oauth-authorization-server carrying `issuer` (served), else the securitySchemes class in the provider OpenAPIs — bound (mutualTLS, DPoP, Signature) > negotiable (oauth2 authorizationCode/clientCredentials, openIdConnect) > bearer (http bearer, apiKey)
- Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
- Stable Error Semantics +8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
- A2A Agent Card +8 pts — a2a/
-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
- Contract Quality scores 0.0 — up to +25.0 composite points
- Access Clarity scores 7.9 — up to +18.4 composite points
- Developer Ergonomics scores 23.8 — up to +15.2 composite points
Markets this provider is in provisional
The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.
| Market | Position | Depth | Registered MCP server | Declares compatibility |
|---|---|---|---|---|
| Commerce Platform Ecosystems (Shopify, WooCommerce, Stripe Apps) | builds-on | 51.7 | - | - |
| Adobe Exchange (publishers of Creative Cloud, Experience Cloud and Document Cloud integrations) | builds-on | 51.7 | - | - |
Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards implemented 1
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
MCP Servers 1
Model Context Protocol servers that expose these APIs to AI agents.
Security Posture 1
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Resources
Documentation 2
Reference material describing how the API behaves
Build 1
SDKs, sample code, and the tooling you integrate with
Access & Security 3
Authentication, authorization, and security posture
Operate 4
Status, limits, changes, and where to get help
Company 6
The organization behind the API
Source (apis.yml)
DataGrail API — frequently asked questions
Does DataGrail have an MCP server?
Yes. APIs.io lists 1 MCP server for DataGrail: Remote MCP server at acme.datagrail.io over HTTP.
Is the DataGrail API ready for AI agents?
DataGrail has a Kin Score of 15.0 out of 100 (emerging) and an Agent Readiness score of 8.6 (agent-aware), scored by API Evangelist on 2026-11-06.
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.