Disclosure · 100 filers

Data Governance

100 companies wrote this into a filing in the last 14 days, up from 63. Below: which of them, and what the corpus says they now owe.

Data measured , page built 22 September 2026 at 16:18 UTC.

100filers, current period
63the period before
59controls it touches
40frameworks
first appears Mar 2008 2008 2026 171 filings in the busiest month
Data Governance in 10-K and 10-Q filings, by month. The marked line is the first month any public company in our record used the phrase; everything left of it is nobody writing it down.
Companies disclosing it 100 wrote this into a filing with the SEC
What it obligates 59 controls across 40 frameworks whose text speaks to it
Employers hiring for it 24,931 open US roles name it, and the ones below are hiring now

The long view, in annual and quarterly filings

A 10-K or 10-Q is a periodic report, so this counts how often the phrase appears in routine annual and quarterly reporting. It moves far more slowly and the numbers are larger. Every month since 2008. The last point is the current month and is still filling, so it always looks lower than it will be.

 
086171
2008 peak 171 in February 2026 2026

Who disclosed it

From SEC full-text search over 8-K filings. Every row links to the filing itself.

CompanyFormFiled
GLACIER BANCORP, INC. GBCI8-K2026-08-03filing
ProPetro Holding Corp. PUMP10-Q2026-07-30filing
Leonardo DRS, Inc. DRS8-K2026-07-17filing
Data443 Risk Mitigation, Inc. ATDS8-K2026-09-02filing
Four Leaf Acquisition Corp8-K2026-09-02filing
PROGRESS SOFTWARE CORP /MA PRGS8-K2026-07-22filing
ESSENTIAL PROPERTIES REALTY TRUST, INC. EPRT8-K2026-09-16filing
CARDINAL HEALTH INC CAH10-K2026-08-11filing
AMERICAN TOWER CORP /MA/ AMT8-K2026-07-28filing
DOMO, INC. DOMO8-K2026-07-22filing
Nexscient, Inc. NXNT8-K2026-08-17filing
Kyndryl Holdings, Inc. KD8-K2026-08-05filing
OCULUS INC. OVTZ10-Q2026-08-06filing
BED BATH & BEYOND, INC.8-K2026-08-04filing
QXO, Inc.8-K2026-07-09filing
ALIGN TECHNOLOGY INC ALGN10-Q2026-08-05filing

The full search on EDGAR

Who is hiring for it

A sample of the open roles naming this phrase. An employer paying a salary against something is the least ambiguous demand signal there is, and every row links to the posting so the claim can be checked rather than believed. The total above is the whole US market; these are the ones we hold the posting for.

RolePosted
Customer Trust Lead
COMMVAULT SYSTEMS INC · Telangana, India
2026-09-22
Manager, ERP Master Data Management (MDM)
OCULAR THERAPEUTIX, INC · Bedford, MA
2026-09-22
Senior Enterprise Project Manager (Data Unification/MDM)
RANGE IMPACT, INC. · Toronto, ON, Canada
2026-09-22
Senior Software Engineer, Trust & Platform Security
Snowflake Inc. · US-CA-Menlo Park
2026-09-22
Senior Data Analytics Engineer
COMMVAULT SYSTEMS INC · Bangalore, India
2026-09-21
Director Finance AI & Data Governance
INTUITIVE SURGICAL INC · Sunnyvale
2026-09-21
Senior Director, Analytics Engineering, Data Analytics & AI
Snowflake Inc. · US-CA-Menlo Park
2026-09-19
Senior Engineering Technical Program Manager - Jira Administration
Okta, Inc. · Toronto, Ontario, Canada
2026-09-18
Senior Manager, Data Product Strategy & Analytics
Pure Storage, Inc. · Bangalore, India
2026-09-18
Senior Pre-Sales Systems Engineer, Higher Education (Northeast)
Pure Storage, Inc. · Remote, Massachusetts; Remote, New York; Remote, Pennsylvania
2026-09-18
Senior Pre-Sales Systems Engineer, Higher Education (Mid-Atlantic)
Pure Storage, Inc. · Remote, Maryland; Remote, Virginia
2026-09-18
GRC Technical Program Manager
UiPath, Inc. · Bucharest
2026-09-18
Workday Systems Lead Consultant
Xometry, Inc. · Waltham, MA
2026-09-18
Workday Systems Lead Consultant
Xometry, Inc. · North Bethesda, MD
2026-09-18

Which industries file it

Companies grouped by the industry classification on their own filing. A count, not a survey.

IndustryCompanies
Software and IT services125
Banking88
Chemicals and pharmaceuticals33
Services and entertainment27
Insurance24
Holding and investment offices21
Electronics and electrical equipment20
Retail15
Securities and investment15
Industrial machinery14

What it obligates

Our corpus holds 59 controls across 40 frameworks whose text speaks to this. Not a judgement: these controls say so, and each is one lookup from its source document. Ordered by how much each framework has to say about it, so the one that will cost you the most work is first. Every name opens that framework in the corpus.

FrameworkControls
Saudi Arabia PDPL verified
Saudi Arabia
6
Bahrain PDPL verified
Bahrain
6
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023) verified
Switzerland
4
EU AI Act verified
European Union
2
IEEE 7000
International
2
Japan AI Guidelines verified
Japan
2
Australia My Health Records Act 2012 verified
Australia
2
ISO 8000
International (ISO/TC 184)
2
DAMA-DMBOK2
International (DAMA International)
2
NIST SP 800-53 Rev 5 verified
United States
1
India DPDP Act verified
India
1
OECD AI Principles verified
International
1
Australia AI Ethics Framework verified
Australia
1
SIG (Shared Assessments) verified
International
1

What an auditor will ask you to produce

The artefacts named on those controls, most frequently cited first.

How it usually fails

Recorded when each control was verified against its source. This is where programmes that think they are covered turn out not to be.

DAMA-DMBOK2 Data Management Body of Knowledge Evidence & Implementation Kit

9 controls sit behind DAMA-DMBOK2, and this is the documentation set for them: an adopt-ready artifact per control, and the evidence an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

DAMA-DMBOK2 Nebraska Data Privacy Act17 shared controlsSwitzerland New Federal Act on D…16 shared controlsISO/IEC 23894:202315 shared controlsNigeria Data Protection Act 2023…15 shared controlsNIST Cybersecurity Framework 2.015 shared controlsNRC 10 CFR 73.5415 shared controlsISO/IEC 25012:200814 shared controlsSOC 214 shared controlsNIST SP 800-53 Rev 514 shared controlsISO 22739:202413 shared controls
DAMA-DMBOK2 holds 136 controls. They appear again inside 289 other frameworks in our corpus; the 10 strongest are shown. Thickness and size both carry the number of controls shared, so work done once counts in every framework on this diagram.
first appears Mar 2008 2008 2026 171 filings in the busiest month
Data Governance in 10-K and 10-Q filings, by month. The marked line is the first month any public company in our record used the phrase; everything left of it is nobody writing it down.

What this actually means

Why now
100 public companies wrote this into an 8-K in the last seven days, 59% more than the seven before. That is not sentiment or a survey. It is a count of companies choosing to put a phrase into a document they are legally accountable for.
Who already cares
24,931 open US roles name this work today, which suggests increased attention to it beyond what any filing says. A job advertisement clears a budget holder and a filing clears legal, so the two answer to different people. We have not measured which moves first, only that both are moving.
What comes into scope
Once the phrase is on the record it maps to obligations within DAMA-DMBOK2, EU Data Governance Act (DGA), ISO 8000. 19 controls behind those, and the difference between asserting them and evidencing them is the whole of the work.
Who is exposed
17 companies disclosed this for the first time in the last ninety days, out of 496 in total. A first mention is a company deciding it can no longer not say it. Whoever has not yet is either genuinely unaffected or has not looked, and nothing here distinguishes the two.

What this obligates

The instruments in our corpus that govern this disclosure, and how many controls sit behind each. This is not a filing count. It is what applies once a company has written the phrase down.

3 frameworks, 19 controls between them.

If that number surprised you, the same measurement across every topic we track:
What changed this week →

This is what it looks like when the same failure is named by standards bodies who never spoke to each other:
How compliance programmes fail →

And the companies that have already written this into a filing:
Data Governance filers →

Tell me when Data Governance files something new

One email when a public company newly discloses this, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

Where this comes from

The left half is public record: SEC full-text search over 8-K filings, counted across a 14 day window against the equivalent window before it. You can check every row.

The right half is ours: 723 frameworks and 20,473 controls, 531 of those frameworks verified against their source documents, with the auditor evidence and common failure modes recorded control by control. Controls appear here because their own text names this term.

Cite this

The Art of Service Signals. Data Governance corporate disclosure activity: 100 filers against 63 in the prior period, in 10-K and 10-Q filings, this quarter against the same quarter last year. Accessed 23 September 2026. https://signals.theartofservice.com/t/data-governance/

Free to use with attribution, no permission needed. The chart downloads as an SVG with the source printed on it. If you cite it we would like to know, but you do not need to ask.

Today's edition · How programmes fail · The obligation index