100filers, current period
63the period before
59controls it touches
40frameworks
Data Governance in 10-K and 10-Q filings, by month.
The marked line is the first month any public company in our record used the phrase; everything left of it is nobody writing it down.
Companies disclosing it
100
wrote this into a filing with the SEC
What it obligates
59
controls across 40 frameworks whose text speaks to it
Employers hiring for it
24,931
open US roles name it, and the ones below are hiring now
The long view, in annual and quarterly filings
A 10-K or 10-Q is a periodic report, so this counts how often the phrase appears in routine annual and quarterly reporting. It moves far more slowly and the numbers are larger.
Every month since 2008. The last point is the current month and is still
filling, so it always looks lower than it will be.
2008
peak 171 in February 2026
2026
Share this finding
Half as many again as the same quarter last year. The card below carries the whole finding, so it makes
sense to somebody who never clicks through.
Who disclosed it
From SEC full-text search over 8-K filings. Every row links to the filing itself.
| Company | Form | Filed | |
| GLACIER BANCORP, INC. GBCI | 8-K | 2026-08-03 | filing |
| ProPetro Holding Corp. PUMP | 10-Q | 2026-07-30 | filing |
| Leonardo DRS, Inc. DRS | 8-K | 2026-07-17 | filing |
| Data443 Risk Mitigation, Inc. ATDS | 8-K | 2026-09-02 | filing |
| Four Leaf Acquisition Corp | 8-K | 2026-09-02 | filing |
| PROGRESS SOFTWARE CORP /MA PRGS | 8-K | 2026-07-22 | filing |
| ESSENTIAL PROPERTIES REALTY TRUST, INC. EPRT | 8-K | 2026-09-16 | filing |
| CARDINAL HEALTH INC CAH | 10-K | 2026-08-11 | filing |
| AMERICAN TOWER CORP /MA/ AMT | 8-K | 2026-07-28 | filing |
| DOMO, INC. DOMO | 8-K | 2026-07-22 | filing |
| Nexscient, Inc. NXNT | 8-K | 2026-08-17 | filing |
| Kyndryl Holdings, Inc. KD | 8-K | 2026-08-05 | filing |
| OCULUS INC. OVTZ | 10-Q | 2026-08-06 | filing |
| BED BATH & BEYOND, INC. | 8-K | 2026-08-04 | filing |
| QXO, Inc. | 8-K | 2026-07-09 | filing |
| ALIGN TECHNOLOGY INC ALGN | 10-Q | 2026-08-05 | filing |
The full search on EDGAR
Who is hiring for it
A sample of the open roles naming this phrase. An employer paying a salary
against something is the least ambiguous demand signal there is, and every row links to the
posting so the claim can be checked rather than believed. The total above is the whole US
market; these are the ones we hold the posting for.
| Role | Posted |
| Customer Trust Lead COMMVAULT SYSTEMS INC · Telangana, India | 2026-09-22 |
| Manager, ERP Master Data Management (MDM) OCULAR THERAPEUTIX, INC · Bedford, MA | 2026-09-22 |
| Senior Enterprise Project Manager (Data Unification/MDM) RANGE IMPACT, INC. · Toronto, ON, Canada | 2026-09-22 |
| Senior Software Engineer, Trust & Platform Security Snowflake Inc. · US-CA-Menlo Park | 2026-09-22 |
| Senior Data Analytics Engineer COMMVAULT SYSTEMS INC · Bangalore, India | 2026-09-21 |
| Director Finance AI & Data Governance INTUITIVE SURGICAL INC · Sunnyvale | 2026-09-21 |
| Senior Director, Analytics Engineering, Data Analytics & AI Snowflake Inc. · US-CA-Menlo Park | 2026-09-19 |
| Senior Engineering Technical Program Manager - Jira Administration Okta, Inc. · Toronto, Ontario, Canada | 2026-09-18 |
| Senior Manager, Data Product Strategy & Analytics Pure Storage, Inc. · Bangalore, India | 2026-09-18 |
| Senior Pre-Sales Systems Engineer, Higher Education (Northeast) Pure Storage, Inc. · Remote, Massachusetts; Remote, New York; Remote, Pennsylvania | 2026-09-18 |
| Senior Pre-Sales Systems Engineer, Higher Education (Mid-Atlantic) Pure Storage, Inc. · Remote, Maryland; Remote, Virginia | 2026-09-18 |
| GRC Technical Program Manager UiPath, Inc. · Bucharest | 2026-09-18 |
| Workday Systems Lead Consultant Xometry, Inc. · Waltham, MA | 2026-09-18 |
| Workday Systems Lead Consultant Xometry, Inc. · North Bethesda, MD | 2026-09-18 |
Which industries file it
Companies grouped by the industry classification on their own filing. A count, not a
survey.
| Industry | | Companies |
|---|
| Software and IT services | | 125 |
| Banking | | 88 |
| Chemicals and pharmaceuticals | | 33 |
| Services and entertainment | | 27 |
| Insurance | | 24 |
| Holding and investment offices | | 21 |
| Electronics and electrical equipment | | 20 |
| Retail | | 15 |
| Securities and investment | | 15 |
| Industrial machinery | | 14 |
What it obligates
Our corpus holds 59 controls across
40 frameworks whose text speaks to this. Not a judgement:
these controls say so, and each is one lookup from its source document. Ordered by how much each
framework has to say about it, so the one that will cost you the most work is first. Every name
opens that framework in the corpus.
What an auditor will ask you to produce
The artefacts named on those controls, most frequently cited first.
- DPO appointment letter and reporting line
- Records of processing activities
- DPIA register and templates
- Privacy by design checklist for projects
- Approved governance policy with documented scope and accountabilities
- Board or steering committee minutes evidencing oversight
- Roles and responsibilities matrix (RACI)
- Data protection impact assessment register and outputs
How it usually fails
Recorded when each control was verified against its source. This is where programmes
that think they are covered turn out not to be.
- ROPA incomplete or stale
- DPIAs not triggered for high-risk processing
- DPO independence not documented
- Privacy by design treated as afterthought
- Policy document exists but lacks evidence of board approval or refresh cycle
- Accountabilities defined on paper but not reflected in performance objectives
DAMA-DMBOK2 Data Management Body of Knowledge Evidence & Implementation Kit
9 controls sit behind DAMA-DMBOK2, and this is the documentation set for them: an adopt-ready artifact per control, and the evidence an auditor asks for against each.
See what is in it, $249
The same set every buyer of this kit receives. Nothing here is produced on request.
DAMA-DMBOK2 holds 136 controls. They appear again inside
289 other frameworks in our corpus; the 10 strongest are shown. Thickness and
size both carry the number of controls shared, so work done once counts in every framework on
this diagram.
Data Governance in 10-K and 10-Q filings, by month.
The marked line is the first month any public company in our record used the phrase; everything left of it is nobody writing it down.
What this actually means
- Why now
- 100 public companies wrote this into an 8-K in the last seven days, 59% more than the seven before. That is not sentiment or a survey. It is a count of companies choosing to put a phrase into a document they are legally accountable for.
- Who already cares
- 24,931 open US roles name this work today, which suggests increased attention to it beyond what any filing says. A job advertisement clears a budget holder and a filing clears legal, so the two answer to different people. We have not measured which moves first, only that both are moving.
- What comes into scope
- Once the phrase is on the record it maps to obligations within DAMA-DMBOK2, EU Data Governance Act (DGA), ISO 8000. 19 controls behind those, and the difference between asserting them and evidencing them is the whole of the work.
- Who is exposed
- 17 companies disclosed this for the first time in the last ninety days, out of 496 in total. A first mention is a company deciding it can no longer not say it. Whoever has not yet is either genuinely unaffected or has not looked, and nothing here distinguishes the two.
What this obligates
The instruments in our corpus that govern this disclosure, and how many controls sit
behind each. This is not a filing count. It is what applies once a company has written the
phrase down.
3 frameworks, 19 controls between them.
Tell me when Data Governance files something new
One email when a public company newly discloses this, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.
Where this comes from
The left half is public record: SEC full-text search over 8-K filings, counted across a
14 day window against the equivalent window before it. You can check
every row.
The right half is ours: 723 frameworks and
20,473 controls, 531 of those frameworks verified against
their source documents, with the auditor evidence and common failure modes recorded control by
control. Controls appear here because their own text names this term.
Cite this
The Art of Service Signals. Data Governance corporate disclosure activity: 100 filers against 63 in the prior period, in 10-K and 10-Q filings, this quarter against the same quarter last year. Accessed 23 September 2026. https://signals.theartofservice.com/t/data-governance/
Free to use with attribution, no permission needed. The chart downloads as an SVG
with the source printed on it. If you cite it we would like to know, but you do not need to
ask.
Today's edition ·
How programmes fail ·
The obligation index