DataBank, Ltd.

United States · www.databank.com · 35 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 35 sub-vendors.

Insights

Last updated 2026-07-18 · revision 2

35 direct vendors, 311 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

DataBank exhibits very high migration readiness, primarily driven by its core business and extensive offerings in cloud services, including Multi-Tenant Cloud, Private Cloud, Bare Metal, and FedRAMP Cloud. This indicates a strong internal capability and expertise in cloud environments and hybrid IT infrastructure, making them well-prepared for migrations to or within cloud platforms. Their internal tech stack, which includes VMware for server virtualization and partnerships for cloud connectivity (Megaport, PacketFabric, PCCW ConsoleConnect), further supports a modern and adaptable infrastructure. The company's comprehensive compliance enablement framework is a significant asset, as it demonstrates their ability to manage complex regulatory requirements during any migration process. A key factor contributing to high readiness, based on the provided data, is 'Total Vendors: 0'. If accurate, this implies an absence of vendor lock-in from their own direct vendors, which would drastically simplify migration efforts by removing a major contractual and technical hurdle. The assessment is constrained by the lack of data on financial stability (revenue concentration, growth history) to fund potential large-scale migrations and unspecified data residency requirements, which could introduce complexities if they were to emerge. Overall, DataBank's cloud-centric operations, compliance expertise, and reported lack of vendor dependencies position it for highly efficient and agile migration initiatives.

Compliance

12 in-scope frameworks identified; showing 3.

SOC 2 (source) — Compliant

DataBank explicitly holds SOC 2 certifications (via SSAE 21 audits) and makes these reports available through its Customer Portal and Trust Center. As a cloud services provider, managed services provider, and data center operator, SOC 2 is a core market requirement. Risk is Low because: (1) DataBank has publicly committed to annual SOC 2 audits and makes reports instantly downloadable via its portal (as evidenced by customer testimonials); (2) SOC 2 is a voluntary framework but is effectively mandatory for DataBank's market position; (3) the company's compliance infrastructure (dedicated CISO, security engineering teams, annual audits) demonstrates mature compliance management; (4) customer testimonials specifically reference the accessibility of SOC 2 reports through DataBank's portal. The primary residual risk is ensuring all new services and data center locations are covered under the SOC 2 scope as DataBank continues to expand.

Evidence: https://www.databank.com/compliance-enablement/ssae-soc1-soc2/, https://www.databank.com/compliance-enablement/, https://trust.databank.com/, https://www.databank.com/customer-portal/

FedRAMP — Compliant

DataBank holds multiple FedRAMP Authorizations to Operate (ATOs) and explicitly markets FedRAMP-compliant cloud and data center solutions to US Federal agencies. Risk is Low because: (1) FedRAMP ATOs are formally granted by the Joint Authorization Board (JAB) or individual agencies after rigorous third-party assessment; (2) DataBank explicitly states it 'holds multiple FedRAMP authorizations to operate (ATO), servicing various Federal agencies'; (3) FedRAMP requires continuous monitoring and annual assessments; (4) the company has a dedicated FedRAMP/FISMA compliance page and cloud offering. This is one of DataBank's strongest compliance credentials.

Evidence: https://www.databank.com/compliance-enablement/fedramp-fisma/, https://www.databank.com/compliance-enablement/, https://www.databank.com/solutions/databank-cloud/

PCI DSS (source) — Compliant

DataBank explicitly holds PCI-DSS compliance with annual Report on Compliance (RoC) audits, which is the highest level of PCI-DSS assessment. Risk is Low because: (1) annual RoC audits are conducted by Qualified Security Assessors (QSAs); (2) DataBank explicitly states its facilities 'receive an annual Report on Compliance (RoC), ensuring we meet or exceed all audit controls'; (3) PCI-DSS compliance is a core market requirement for DataBank's merchant and financial services customers; (4) the company's physical security, network segmentation, and access controls are directly relevant to PCI-DSS requirements. DataBank acts as a service provider under PCI-DSS, with its customers (merchants, payment processors) bearing primary cardholder data security responsibility.

Evidence: https://www.databank.com/compliance-enablement/pci-dss/, https://www.databank.com/compliance-enablement/

Financials

Three-year financials

Financial Resilience Score: 7/10

DataBank benefits from a deep institutional capital base led by DigitalBridge and long-duration co-investors (AustralianSuper, Swiss Life, EDF Invest, Nuveen, IMCO, Ardian, TJC, Northleaf, CBRE Caledon), providing ready equity funding and reducing refinancing risk. The October 2023 recapitalization raised approximately $2 billion in new equity capital, materially strengthening the balance sheet and enabling AI-era capacity expansion. The company's recurring, contracted colocation and interconnection revenues produce annuity-like cash flows that support ABS financing and stable operations. Scale (76 data centers across 29 markets, ~4.98M sq ft, ~1 GW critical IT load), strong compliance certifications (FedRAMP, HIPAA, SOC, ISO), and diverse enterprise/government/healthcare customer bases further support resilience. However, high leverage typical of data center platforms, significant capital intensity for AI-ready builds, intense competition from hyperscalers and peers like Equinix and Digital Realty, and heavy U.S. geographic concentration temper the outlook. Private-company opacity also limits external assessment.

Key strengths: Backed by DigitalBridge ($119B AUM) and a consortium of long-duration institutional investors, ~$2 billion equity recapitalization completed October 2023, Recurring, contracted revenue model supporting ABS financing, 76 data centers across 29 U.S. markets plus London; ~1 GW critical IT load, Strong compliance certifications (FedRAMP, FISMA, HIPAA, PCI-DSS, SOC 1/2, ISO 27001, ITAR, StateRAMP, GDPR), Diversified customer base across enterprise, federal government, healthcare, and technology

Risk factors: High leverage typical of data center platforms with substantial secured debt (ABS, term loans, mortgage debt), Capital intensity of AI-ready builds may drive negative free cash flow during expansion, Intense competition from Equinix, Digital Realty, CyrusOne, Iron Mountain, Aligned, Vantage, QTS/Blackstone, and hyperscalers, Heavy geographic concentration in the U.S. (only London site outside U.S.), Private-company opacity limits transparency for counterparties, Power and grid constraints in key metros (Northern Virginia, Dallas, Silicon Valley), Rising interest rates raise refinancing costs

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report