Strengths
- CB Insights lists Kiteworks as a $1B unicorn row.
- Company pages verify an active Private Data Network product suite.
- Management, careers and newsroom pages support active operating/team signals.
Diligence report
Kiteworks
Kiteworks Startup Diligence Report
Kiteworks has credible public signals for a regulated-enterprise secure data exchange platform, with FedRAMP/trust artifacts and broad product coverage. The key diligence question is whether the $1B valuation is supported by durable ARR growth, retention, gross margin, channel efficiency and defensible security/compliance differentiation against MFT, collaboration-suite and data-security competitors.
Company profile
Kiteworks Startup Diligence Report
Kiteworks appears eligible for this run as an active private unicorn based on the CB Insights $1B row and current company operating pages. Public evidence supports product breadth, regulated-market positioning, named customers/logos, private-equity investors, management and compliance assurance signals, but investment-grade diligence still requires private financials, cap table, retention, security packages, legal/IP schedules and customer references.
- Website
- www.kiteworks.com
- Sector
- Enterprise technology / secure content communications, managed file transfer, data governance and compliance software
- Geography
- United States; Palo Alto/San Mateo, California with global regulated-enterprise and public-sector positioning
- Stage
- Private unicorn / growth-stage enterprise software company
- Known aliases
- Kiteworks, Kiteworks, Inc., Accellion, Accellion Kiteworks, Private Data Network
- Report version
- 1.0
- Timezone
- UTC
Executive summary
Risks
- Financial quality and valuation support are private.
- Customer concentration, churn and NRR are not public.
- Security/compliance claims create high-stakes warranty, regulatory and reputational exposure.
Gaps
- Audited financials, ARR/bookings bridge, gross margin, cash, debt, burn and forecast model.
- Cap table, preferences, option pool, warrants/notes/debt and financing documents.
- Top customer ARR, churn, NRR, contracts, support metrics and reference calls.
- SOC/FedRAMP/security package scope, incident history, pen-test remediation and DPAs.
- Litigation, IP/open-source, insurance and material-contract schedules.
Risk register
R-006: Security/compliance warranty exposure
Kiteworks sells into regulated security workflows; any control failure can create customer, regulatory and reputational exposure.
Diligence request: Counsel and security specialists should review SOC/FedRAMP packages, pen tests, incident history, DPAs and contractual liability caps.
R-001: Financial quality and valuation support
Public evidence verifies a $1B CB valuation row but not audited revenue, ARR bridge, margins, cash runway or debt.
Diligence request: Request audited financials, KPI pack, ARR/bookings bridge, customer cohort metrics, cash/debt and board-approved forecasts.
R-002: Cap-table and financing stack opacity
Investor names are public, but ownership, preferences, debt, warrants, secondary terms and option pool are private.
Diligence request: Request cap table, financing documents, liquidation preference schedule, debt/warrant/SAFE schedule and option ledger.
R-003: Customer concentration and retention opacity
Customer logos and ratings do not disclose revenue concentration, churn, NRR, renewal terms or support escalations.
Diligence request: Request top-customer ARR, contracts, renewal cohorts, churn/NRR and reference calls.
R-009: Competitive pressure from MFT, file-share and DSPM incumbents
Kiteworks competes with MFT, enterprise content, cloud collaboration and data-security vendors with larger distribution.
Diligence request: Run win/loss interviews against Fortra, Progress, Box, Microsoft, Egnyte, ShareFile and data-security governance vendors.
R-005: Product complexity and roadmap execution
Broad PDN, MFT, email, forms, DRM and Compliant AI scope may create integration, support and delivery complexity.
Diligence request: Review product usage by SKU, roadmap commitments, support tickets, SRE metrics and security architecture.
R-010: Government and regulated-market compliance burden
FedRAMP and CMMC-oriented selling can lengthen procurement and require continuous controls maintenance.
Diligence request: Review ATO/FedRAMP monitoring, government pipeline, compliance staffing and renewal requirements.
R-004: Go-to-market efficiency and channel dependence
Partner ecosystem and quote-based enterprise GTM are public, but channel mix, pipeline conversion and CAC/payback are private.
Diligence request: Request pipeline, bookings by channel, partner concentration, CAC/payback and win/loss data.
01Financial Information
Public sources verify a headline $1B valuation row and packaging/pricing signals, but not audited statements, management accounts, backlog, AR aging or gross profit. A public valuation anchor exists; projections, growth drivers, cash runway and financing assumptions require private model diligence.
I.A Annual and quarterly financial information for the past three years
not publicly verifiable confidence: low
Public sources verify a headline $1B valuation row and packaging/pricing signals, but not audited statements, management accounts, backlog, AR aging or gross profit.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-001 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| metric | public signal | verification status | diligence request |
|---|---|---|---|
| Headline valuation | $1B CB Insights row | verified from market database | Tie to financing docs and valuation bridge |
| Enterprise package pricing | Enterprise call-for-pricing; Business and Enterprise package capabilities disclosed | partially_verified | Request ARR, ACV, discounting, gross margin and SKU mix |
| Customer scale | Thousands of private and public sector organizations rely on Kiteworks | partially_verified | Request paid-customer count, logo retention, churn and NRR |
I.B Financial Projections
partially verified confidence: medium
A public valuation anchor exists; projections, growth drivers, cash runway and financing assumptions require private model diligence.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-001 remains open until private diligence closes the related evidence gap.
- R-002 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
I.C Capital Structure
partially verified confidence: medium
Investor names and employee stock-option benefit signals are public, but cap table, preferences, debt, warrants and option pool are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-002 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| stakeholder | public position | diligence caveat |
|---|---|---|
| Insight Partners | Listed as private equity investor | Ownership, preferences and rights are private |
| Sixth Street Growth | Listed as private equity investor | Investment instrument and downside protections private |
| Baring Private Equity Asia | Listed as private equity investor | Historical stake and current rights private |
| Employees / option holders | Stock options listed as employee benefit | Option pool, vesting and refresh grants private |
I.D Other financial information
partially verified confidence: medium
Financing history is limited to CB valuation/date and public investor names; detailed round economics require financing documents.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-001 remains open until private diligence closes the related evidence gap.
- R-002 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| date | event | lead participants | amount | post money | source |
|---|---|---|---|---|---|
| 2024-08-14 | CB Insights unicorn-list date joined | not disclosed in CB row | not disclosed | $1B | CB Insights |
| current diligence date | Round-by-round financing history | Insight Partners, Sixth Street Growth and Baring Private Equity Asia are public investor names | not_publicly_verifiable | not_publicly_verifiable | request financing ledger |
02Products
Kiteworks publicly markets a broad Private Data Network product suite; SKU usage, margins and roadmap economics are private.
II.A Description of each product
verified confidence: medium
Kiteworks publicly markets a broad Private Data Network product suite; SKU usage, margins and roadmap economics are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-005 remains open until private diligence closes the related evidence gap.
- R-006 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| product | audience | key features | public evidence | verification status |
|---|---|---|---|---|
| Private Data Network | regulated enterprises and public sector | central controls, enforcement, visibility, audit logs | About and PDN pages | verified |
| Secure file share and email | business users and external collaborators | secure send/share/receive, plugins, access controls | Pricing and navigation pages | verified |
| Managed File Transfer / SFTP / SMTP | IT and operations teams | automated file transfer and secure protocols | Pricing add-ons and MFT page | verified |
| DRM, web forms, APIs and integrations | legal, compliance, customer workflows | rights management, governed forms, secure APIs | pricing/platform pages | verified |
| Compliant AI | regulated AI-agent workflows | governed assists, ABAC, audit logs, FIPS encryption | Compliant AI page and newsroom | verified |
| offering | public price or signal | public evidence | verification status |
|---|---|---|---|
| Business | buy-now flow; 5 to 500 users; 2 GB max file size | Pricing page | partially_verified |
| Enterprise | call for pricing; unlimited users; 16 TB max file size | Pricing page | partially_verified |
| Enterprise add-ons | MFT, APIs, Email Protection Gateway, DRM, FedRAMP hosted, IRAP hosted listed as available | Pricing page | verified |
| Competitor benchmark | not_publicly_verifiable | requires buyer quotes and contracts | not_publicly_verifiable |
03Customer Information
Public logos, review widgets and thousands-of-organizations language support demand signals, not revenue concentration proof. Public partner and investor relationships are visible; economics, exclusivity, co-sell contribution and termination rights are private.
III.A Top customers by application
partially verified confidence: medium
Public logos, review widgets and thousands-of-organizations language support demand signals, not revenue concentration proof.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-003 remains open until private diligence closes the related evidence gap.
- R-012 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| name or cohort | use case | public evidence | source | verification status |
|---|---|---|---|---|
| ConnectWise, Honda, Porsche, Natixis, AXA Assistance | enterprise secure data exchange | Logo list | Customers page | partially_verified |
| Target, eBay, HPE, Wessex Water, DNV, Qatar Energy | cross-industry logos | Logo list | Customers page | partially_verified |
| G2 / PeerSpot / Gartner review widgets | buyer review signal | 4.4, 4.4 and 4.2 out of 5 shown on customer page | Customers page | partially_verified |
| Paid customer concentration | revenue quality | not disclosed | request customer ledger | not_publicly_verifiable |
III.B Strategic relationships
partially verified confidence: medium
Public partner and investor relationships are visible; economics, exclusivity, co-sell contribution and termination rights are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-004 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| partner | nature | public evidence | gap |
|---|---|---|---|
| Insight Partners / Sixth Street Growth / BPEA | private equity investors | investor page | economics, control rights and governance private |
| Channel First Partners including SHI, Optiv, CDW, GovSmart | reseller/channel | partner page logos/list | partner revenue contribution and termination terms private |
| Technology partners including Check Point, FireEye and iManage references | technology integrations | partner quotes/list | integration quality, support and commercial terms private |
| FedRAMP assessor / AWS hosting dependencies | compliance and infrastructure | FedRAMP page references Coalfire and AWS VPC | supplier contracts and SLAs private |
III.C Revenue by customer
not publicly verifiable confidence: low
Revenue by customer and any customer over 5 percent of revenue are not public.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-003 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
III.D Significant relationships severed within the last two years
not publicly verifiable confidence: low
No reviewed public page disclosed severed material relationships in the last two years; absence of public evidence is not confirmation.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-003 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
III.E Top suppliers
partially verified confidence: medium
AWS/FedRAMP, assessor, channel and assurance dependencies are visible, but spend, SLAs and concentration are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-006 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| supplier or dependency | role | public evidence | concentration risk |
|---|---|---|---|
| AWS virtual private cloud | FedRAMP hosted environment | FedRAMP page says deployed on a virtual private cloud in AWS | request cloud spend, redundancy and contract terms |
| Coalfire | FedRAMP assessor | FedRAMP page names Coalfire independent assessment | assessor relationship and annual audit schedule |
| Technology/channel partners | GTM and integrations | partner page lists ecosystem | revenue share and support dependency private |
| Security assurance vendors | trust center audits and pen tests | Trust center lists assurance artifacts | scope and remediation details private |
04Competition
Kiteworks competes across MFT, secure collaboration, suite, compliance and data-security markets; win/loss and market share require buyer diligence.
IV.A Competitive landscape by market segment
partially verified confidence: medium
Kiteworks competes across MFT, secure collaboration, suite, compliance and data-security markets; win/loss and market share require buyer diligence.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-009 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| competitor | segment | product overlap | differentiator to test |
|---|---|---|---|
| Fortra GoAnywhere / Globalscape | MFT | managed file transfer and secure automation | security architecture, compliance breadth and migration friction |
| Progress MOVEit | MFT | enterprise transfer workflows | security posture, roadmap and trust after MFT-sector incidents |
| Box / Egnyte / ShareFile | enterprise content collaboration | file sharing and external collaboration | compliance controls and total cost |
| Microsoft Purview / OneDrive / SharePoint | suite incumbent | content governance and sharing bundled in M365 | specialized zero-trust exchange versus bundle economics |
| DSPM / data-security governance vendors | data security platforms | visibility, classification and policy enforcement | workflow coverage and integrations |
| axis | target position | top competitor position | evidence or gap |
|---|---|---|---|
| Compliance breadth | FedRAMP, CMMC, HIPAA, GDPR, SOC and ISO claims | varies by vendor | validate certificates and contract warranties |
| Workflow breadth | file share, email, MFT, forms, APIs, DRM, Compliant AI | specialist or suite vendors | request SKU adoption and support tickets |
| Pricing power | enterprise call-for-pricing | bundle and per-seat alternatives | request discounting and win/loss |
| Security trust | trust center and FedRAMP signals | requires customer diligence | review incident history and pen-test remediation |
05Marketing, Sales, and Distribution
Public GTM signals include direct demo/sales, channel partners, compliance content and customer proof; CAC/payback and channel mix are private. Major-customer status, future growth and pipeline cannot be validated from logos/review snippets alone.
V.A Strategy and implementation
partially verified confidence: medium
Public GTM signals include direct demo/sales, channel partners, compliance content and customer proof; CAC/payback and channel mix are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-004 remains open until private diligence closes the related evidence gap.
- R-010 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| channel | region | public evidence | gap |
|---|---|---|---|
| Direct enterprise sales | Global | demo/contact sales flows and management CRO/sales leaders | quota attainment, sales cycle and CAC private |
| Channel First partners | United States and global partners | partner list includes SHI, Optiv, CDW, GovSmart and others | partner revenue concentration private |
| Technology alliances | global | partner page references Check Point, FireEye, iManage examples | co-sell economics and integration usage private |
| Government/compliance-led demand | United States federal and regulated industries | FedRAMP and CMMC positioning | public-sector pipeline and contract vehicles private |
| signal | evidence | interpretation | gap |
|---|---|---|---|
| Newsroom cadence | 2026 releases for Compliant AI, ownCloud OSPO, partnerships and reports | active product/PR motion | lead attribution and pipeline conversion private |
| Trust and compliance content | Trust Center, FedRAMP, CMMC/ISO/SOC content | compliance-led enterprise positioning | buyer influence and close rates private |
| Customer/review page | logos and review ratings | social proof | reference independence and revenue impact private |
| Pricing/demo CTAs | business buy-now and enterprise call-for-pricing | hybrid self-service/enterprise motion | conversion rates private |
V.B Major Customers
not publicly verifiable confidence: low
Major-customer status, future growth and pipeline cannot be validated from logos/review snippets alone.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-003 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
V.C Principal avenues for generating new business
partially verified confidence: medium
Partner ecosystem and direct/compliance-led motions are public; source weights and conversion economics require pipeline data.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-004 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
V.D Sales force productivity model
not publicly verifiable confidence: low
Sales compensation, quotas, sales cycle, productivity and ramp are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-004 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
V.E Ability to implement marketing plan with current and projected budgets
not publicly verifiable confidence: low
Marketing-plan budget sufficiency and implementation capacity require internal budget and staffing data.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-004 remains open until private diligence closes the related evidence gap.
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
06Research and Development
Product/security/engineering leadership is public; org depth, engineering metrics and technical debt are private. Public product releases and roadmap signals exist, while delivery dates, adoption, cost and reliability metrics require private diligence.
VI.A Description of R&D organization
partially verified confidence: medium
Product/security/engineering leadership is public; org depth, engineering metrics and technical debt are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-005 remains open until private diligence closes the related evidence gap.
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| name | role | public background signal | source |
|---|---|---|---|
| Yaron Galant | Chief Product Officer | Product leadership named on management page | SRC-008 |
| Frank Balonis | SVP Operations & CISO | Security and operations leadership named on management page | SRC-008 |
| SooYing Ng | VP Application Engineering | Engineering leadership named on management page | SRC-008 |
| Budi Aprianto | VP Systems Engineering | Systems engineering leadership named on management page | SRC-008 |
| Kumud Kokal | Chief Information Officer | Technology/IT leadership named on management page | SRC-008 |
VI.B New Product Pipeline
partially verified confidence: medium
Public product releases and roadmap signals exist, while delivery dates, adoption, cost and reliability metrics require private diligence.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-005 remains open until private diligence closes the related evidence gap.
- R-006 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| project | status | expected date | source | verification |
|---|---|---|---|---|
| Compliant AI and governed assists | publicly launched/marketed in 2026 | current | SRC-012; SRC-013 | verified public launch; adoption private |
| ownCloud OSPO / digital sovereignty | public 2026 newsroom item | current | SRC-012 | verified public announcement; community traction private |
| FedRAMP High Secure Gov Cloud | High In Process | not disclosed | SRC-005 | partially_verified from company page |
| MFT, forms, DRM and API extensions | commercially marketed add-ons | current | SRC-004; SRC-014 | verified public packaging; usage private |
07Management and Personnel
A formal organization chart is not public, but senior-management roles are listed. Hiring infrastructure and benefits are public, but historical/projected headcount by function/location is not fully public.
VII.A Organization Chart
partially verified confidence: medium
A formal organization chart is not public, but senior-management roles are listed.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VII.B Historical and projected headcount by function and location
partially verified confidence: medium
Hiring infrastructure and benefits are public, but historical/projected headcount by function/location is not fully public.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| function | region | public evidence | source |
|---|---|---|---|
| Global team | global | careers page links to all job openings | SRC-009 |
| Sales and channels | Americas, APAC, EMEA | management roster names sales and regional/channel leaders | SRC-008 |
| Product/engineering/security | not fully disclosed | CPO, application engineering, systems engineering, CIO, CISO roles listed | SRC-008 |
| Employee incentives | United States | US benefits include stock options | SRC-009 |
VII.C Senior management biographies
partially verified confidence: medium
Selected senior management roles are public; full biographies, references and background checks require private diligence.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| name | role | function | source |
|---|---|---|---|
| Jonathan Yaron | Chairman and CEO | executive leadership | SRC-008 |
| Kurt Michael | Chief Revenue Officer | sales/revenue | SRC-008 |
| Yaron Galant | Chief Product Officer | product | SRC-008 |
| Tim Freestone | Chief Marketing Officer | marketing | SRC-008 |
| Frank Balonis | SVP Operations & CISO | operations/security | SRC-008 |
| Camilo Artiga-Purcell | General Counsel | legal | SRC-008 |
VII.D Compensation arrangements
not publicly verifiable confidence: low
Employment agreements, compensation arrangements and benefit plans beyond high-level benefits are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VII.E Incentive stock plans
not publicly verifiable confidence: low
Equity incentive plan terms, option pool, refresh grants and vesting are private; careers page lists stock options as a benefit.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-002 remains open until private diligence closes the related evidence gap.
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VII.F Significant employee relations problems, past or present
not publicly verifiable confidence: low
Employee-relations problems are not assessable without HR, legal and employee-relations records.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VII.G Personnel Turnover
not publicly verifiable confidence: low
Personnel turnover and retention data for the last two years are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| area | public signal | verification status | diligence request |
|---|---|---|---|
| Turnover/attrition | not disclosed | not_publicly_verifiable | request HRIS and attrition history |
| Compensation bands | benefits listed; compensation bands not disclosed | not_publicly_verifiable | request compensation and equity plans |
| Employee relations matters | not disclosed | not_publicly_verifiable | request HR/legal schedule |
| Succession | management roster public; succession depth private | not_publicly_verifiable | request org chart and succession plan |
08Legal and Related Matters
No comprehensive litigation-against-company docket search was included in public-source research; company pages are insufficient. No comprehensive company-initiated litigation docket search was included in public-source research.
VIII.A Pending lawsuits against the Company
not publicly verifiable confidence: low
No comprehensive litigation-against-company docket search was included in public-source research; company pages are insufficient.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-007 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| case or area | public evidence | verification status | diligence request |
|---|---|---|---|
| Comprehensive litigation against Kiteworks | not available in reviewed company pages | not_publicly_verifiable | counsel docket searches and litigation schedule |
| Security/customer claims | trust center and FedRAMP pages show controls but not incident/legal schedule | not_publicly_verifiable | request incident history and claims schedule |
| Legacy Accellion/Kiteworks matters | not fully evaluated in this public-source screen | inconclusive | counsel to review legacy product liabilities and releases |
VIII.B Pending lawsuits initiated by Company
not publicly verifiable confidence: low
No comprehensive company-initiated litigation docket search was included in public-source research.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-007 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| matter type | public evidence | verification status | diligence request |
|---|---|---|---|
| IP enforcement | not disclosed in reviewed pages | not_publicly_verifiable | request active/past IP litigation schedule |
| Commercial disputes | not disclosed in reviewed pages | not_publicly_verifiable | request dispute and collections schedule |
| Employment matters | not disclosed in reviewed pages | not_publicly_verifiable | request HR/legal matter schedule |
VIII.C Environmental and employee safety issues and liabilities
not publicly verifiable confidence: low
Environmental, safety or workplace exposure diligence depends on company records and regulator correspondence; software profile lowers but does not eliminate workplace/legal exposure.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-007 remains open until private diligence closes the related evidence gap.
- R-008 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VIII.D Material patents, copyrights, licenses, and trademarks
partially verified confidence: medium
Trust/IP-adjacent assets are visible, but complete patent, trademark, copyright, open-source and assignment schedules require counsel review.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-007 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| asset | jurisdiction or scope | status | source |
|---|---|---|---|
| Kiteworks brand and software platform | global enterprise software | publicly marketed; IP ownership schedule private | SRC-002 |
| SOC 2 Type 2 with HITRUST Mapping | security assurance | Trust Center artifact listed with 2026 update | SRC-010 |
| ISO 27001 / 27017 / 27018 certificates | security/privacy assurance | Trust Center artifacts listed | SRC-010 |
| FedRAMP Moderate / High In Process | US federal cloud | publicly claimed; verify in FedRAMP Marketplace and package | SRC-005 |
| Patent/trademark/open-source schedules | global | not_publicly_verifiable in this report | request counsel export |
VIII.E Insurance coverage and material exposures
not publicly verifiable confidence: low
Insurance coverage and material exposures are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-006 remains open until private diligence closes the related evidence gap.
- R-007 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VIII.F Material contracts
not publicly verifiable confidence: low
Material contracts, change-of-control clauses, customer SLAs and supplier terms are private.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-006 remains open until private diligence closes the related evidence gap.
- R-011 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
VIII.G Regulatory agency problems
partially verified confidence: medium
FedRAMP, Trust Center and privacy/compliance signals are public, but comprehensive regulator correspondence and agency history require counsel-led diligence.
Evidence gaps
- Private records and direct counterparty confirmations are required to fully answer this checklist item.
Hidden risks
- R-006 remains open until private diligence closes the related evidence gap.
- R-010 remains open until private diligence closes the related evidence gap.
Follow-up questions
- Provide supporting private data-room documents for this checklist area.
| agency or framework | public signal | date or status | diligence gap |
|---|---|---|---|
| FedRAMP | Moderate Authorization and High In Process claimed | Moderate since June 2017; High In Process February 2025 | review FedRAMP package and POA&M |
| SOC/HITRUST/ISO/BSI C5/IRAP/PCI | Trust Center lists artifacts | 2025-2026 artifacts listed | review scope, carve-outs and findings |
| Privacy regimes | GDPR/HIPAA/CCPA/CMMC positioning | public marketing claims | review DPAs, subprocessor list and regulator correspondence |
| Insurance/material contracts | not disclosed | not_publicly_verifiable | request insurance policies, cyber limits and material contracts |
Evidence
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists Kiteworks as a current unicorn row with $1B valuation. | verified high | SRC-001 |
| EC-002 | Kiteworks is active publicly in 2026 and markets a Private Data Network. | verified high | SRC-002SRC-012 |
| EC-003 | The platform includes zero-trust controls, audit logs, governance and visibility. | verified medium | SRC-003 |
| EC-004 | Public packaging separates Business and Enterprise tiers; detailed enterprise pricing is private. | verified medium | SRC-004 |
| EC-005 | Kiteworks claims FedRAMP Moderate Authorization and FedRAMP High In Process status. | verified medium | SRC-005 |
| EC-006 | Kiteworks publicly names customer logos and states thousands of private/public sector organizations rely on it. | partially verified medium | SRC-006 |
| EC-007 | Public review snippets show positive ratings but not retention or revenue quality. | partially verified low | SRC-006 |
| EC-008 | Kiteworks publicly lists Insight Partners, Sixth Street Growth and Baring Private Equity Asia as private equity investors. | verified medium | SRC-007 |
| EC-009 | Kiteworks publishes a management roster led by Jonathan Yaron. | verified medium | SRC-008 |
| EC-010 | Kiteworks careers page indicates ongoing hiring infrastructure and employee benefits, including stock options. | partially verified medium | SRC-009 |
| EC-011 | Trust Center lists current assurance artifacts including SOC 2, HITRUST, BSI C5, penetration tests and ISO certificates. | partially verified medium | SRC-010 |
| EC-012 | Kiteworks operates a channel and technology partner ecosystem. | verified medium | SRC-011 |
| EC-013 | Kiteworks continues to launch products and partnerships in 2026. | verified medium | SRC-012SRC-013 |
| EC-014 | Kiteworks Compliant AI positions the product for regulated AI-agent data access governance. | verified medium | SRC-013 |
| EC-015 | Managed file transfer and secure exchange are key product motions, but usage by SKU is private. | verified medium | SRC-004SRC-014 |
| EC-016 | Public materials do not disclose audited revenue, ARR, gross margin, cash runway or debt. | not publicly verifiable high | SRC-004SRC-007 |
| EC-017 | Public sources do not disclose customer concentration, churn, NRR or contract terms. | not publicly verifiable high | SRC-006 |
| EC-018 | Legal, regulatory, IP, insurance and material-contract schedules require counsel/private data-room review. | not publicly verifiable high | SRC-005SRC-010SRC-015 |
| ID | Publisher | Title | Accessed |
|---|---|---|---|
| SRC-001 | CB Insights | The Complete List Of Unicorn Companies | 2026-06-12 |
| SRC-002 | Kiteworks | About Kiteworks | 2026-06-12 |
| SRC-003 | Kiteworks | Zero-Trust Data Protection: Kiteworks Private Data Network | 2026-06-12 |
| SRC-004 | Kiteworks | Kiteworks pricing and packages | 2026-06-12 |
| SRC-005 | Kiteworks | FedRAMP Authorization | 2026-06-12 |
| SRC-006 | Kiteworks | Kiteworks Customers | 2026-06-12 |
| SRC-007 | Kiteworks | Kiteworks Investors | 2026-06-12 |
| SRC-008 | Kiteworks | Kiteworks Management | 2026-06-12 |
| SRC-009 | Kiteworks | Kiteworks Careers | 2026-06-12 |
| SRC-010 | Kiteworks / UpGuard | Kiteworks Trust Center | 2026-06-12 |
| SRC-011 | Kiteworks | Kiteworks Partner Ecosystem | 2026-06-12 |
| SRC-012 | Kiteworks | Kiteworks Newsroom | 2026-06-12 |
| SRC-013 | Kiteworks | Kiteworks Compliant AI | 2026-06-12 |
| SRC-014 | Kiteworks | Secure Managed File Transfer | 2026-06-12 |
| SRC-015 | Kiteworks | Privacy Policy | 2026-06-12 |
Disclaimer
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.