Document360

United Kingdom · document360.com · 11 vendors

Document360 is a cloud-based enterprise knowledge management software provider that offers an AI-powered platform for businesses. It enables teams to create, manage, and publish self-service documentation, knowledge bases, and user manuals. The platform aims to improve knowledge transfer, provide 24x7 online support, and enhance customer satisfaction by offering instant access to accurate information.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 11 sub-vendors.

Insights

Last updated 2026-08-03 · revision 1

11 direct vendors, 168 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Document360 exhibits a high level of migration readiness, primarily driven by its modern and cloud-native technology stack. The core platform is a multi-tenant SaaS architecture hosted on Microsoft Azure, leveraging contemporary technologies like MongoDB (vector database), OpenAI API for AI/LLM capabilities, REST APIs, and webhook integrations. This cloud-native foundation, coupled with the use of standard protocols and APIs, significantly reduces technical barriers to potential migration or re-platforming efforts. The offering of a 'Private Hosting' enterprise option for organizations with strict data residency or compliance requirements further demonstrates architectural flexibility and an ability to adapt to diverse deployment needs. While the company utilizes approximately 10 distinct technology vendors, this number is manageable and does not indicate extreme vendor lock-in by count. However, a significant challenge to migration readiness is the critical absence of financial stability data (revenue concentration, growth history), which makes it impossible to assess the company's financial capacity to fund a major migration initiative. Additionally, the high geographic concentration of key technology vendors (predominantly US-based, including Microsoft Azure, MongoDB, OpenAI, Cloudflare, Stripe, Segment, Mixpanel, WordPress, Google Tag Manager) could introduce complexity and potential dependencies if a migration involves shifting away from US-centric services or requires extensive renegotiations across a concentrated vendor base. The reliance on OpenAI for core AI features, while a modern choice, could also represent a specific lock-in point for that functionality, though the Model Context Protocol (MCP) server might offer some abstraction. The provided 'Vendor Relationships' data stating 'Total Vendors: 0' is contradictory to the detailed 'Internal Tech Stack' and has been disregarded in favor of the specific vendor technologies listed.

Compliance

6 in-scope frameworks identified; showing 3.

India DPDP Act 2023 — Assessment Required

Document360's parent company Kovai.co and its subsidiary Kovai Systems India Private Limited are based in India (confirmed by the SOC 2 scope which includes 'Kovai Systems India Private Limited'). The India Digital Personal Data Protection Act 2023 (DPDP Act) was enacted in August 2023 and its rules are being finalized. The Act applies to processing of digital personal data within India and to processing outside India if it involves offering goods/services to Indian data principals. As Document360 has significant operations in India (customer support team, engineering), it will be subject to the DPDP Act. Risk is Medium because: (1) the Act is newly enacted with rules still being finalized; (2) Document360 explicitly processes personal data in India for support services; (3) penalties under the DPDP Act can reach ₹250 crore (~$30M) per breach; (4) no DPDP compliance statement was found.

Evidence: https://document360.com/gdpr-compliance/, https://document360.com/trust-center/, https://document360.com/compliance/soc2/

SOC 2 (source) — Compliant

Document360 has achieved SOC 2 Type II certification, which is the most rigorous form of SOC 2 assurance, covering the effectiveness of controls over a defined period (Nov 1, 2024 – Oct 31, 2025). This is independently audited by a third-party CPA firm. The scope covers both Document360 Limited (UK) and Kovai Systems India Private Limited (India). The report covers Security, Availability, Confidentiality, Processing Integrity, and Privacy Trust Service Criteria. Annual renewal demonstrates ongoing commitment. Risk is Low because the certification is current, independently validated, and covers the full operational period. The only residual risk is that the full report requires an NDA to access, meaning external parties cannot independently verify the absence of exceptions or qualifications without requesting the report.

Evidence: https://document360.com/compliance/soc2/, https://document360.com/trust-center/

CPRA — Assessment Required

Document360 serves customers across 150+ countries and explicitly targets US markets. The CCPA/CPRA applies to for-profit businesses that: (1) have annual gross revenues exceeding $25M; (2) buy, sell, or share personal information of 100,000+ California consumers/households annually; or (3) derive 50%+ of annual revenues from selling/sharing personal information. Given Document360's global scale (150+ countries, thousands of business customers, G2 Leader status), it is plausible that it meets one or more CCPA thresholds. Risk is Medium because: (1) the company processes personal data of US (including California) residents; (2) no CCPA-specific privacy notice or opt-out mechanism was found; (3) the privacy policy does not appear to include California-specific disclosures; (4) CCPA/CPRA fines reach $7,500 per intentional violation.

Evidence: https://document360.com/privacy/, https://document360.com/trust-center/

Financials

Three-year financials

Financial Resilience Score: 7/10

Kovai Limited (parent of Document360) demonstrates strong qualitative financial resilience despite limited public quantitative disclosure. The company is bootstrapped, having reached ~$10M group ARR by 2021 without external equity dilution or significant debt, and its founder publicly emphasizes frugal, profitability-oriented operations. This bootstrapped posture typically implies conservative cash management and lower solvency risk than venture-funded peers. The company benefits from a diversified three-product SaaS portfolio (BizTalk360, Turbo360, Document360), a global customer base across 150+ countries with marquee enterprise logos (McDonald's, NHS, HP, Puma, Samsung Ads), and enterprise-grade certifications (SOC 2 Type 2, ISO 27001:2022) that support renewal economics. Structural cost advantages from an India-based (Coimbatore) delivery hub combined with UK/US revenue provide favorable unit economics. Document360 is positioned in a high-growth AI knowledge base category, and the November 2024 Floik acquisition indicates enough balance sheet strength for tuck-in M&A. However, the resilience score is capped by material transparency gaps: no audited revenue, EBIT, or equity figures are publicly disclosed, and the company faces intense competition from well-funded incumbents (Zendesk, Atlassian, Notion, Guru, GitBook) and AI-native entrants. Key-person dependency on founder Saravana Kumar, first-time M&A integration risk, and exposure to declining Microsoft BizTalk usage in legacy products further constrain the score.

Key strengths: Bootstrapped to ~$10M group ARR by 2021 without external funding, Diversified three-product SaaS portfolio reduces single-product risk, Enterprise customer base across 150+ countries with marquee logos, SOC 2 Type 2 and ISO 27001:2022 certifications support enterprise renewals, India-based delivery hub provides structural cost advantages, Successful first M&A (Floik, Nov 2024) indicates balance sheet strength, Founder recognized with multiple bootstrapping awards (Economic Times, SaaSBoomi, TEKPON)

Risk factors: Limited financial transparency as private bootstrapped UK entity, Intense AI competitive pressure from well-funded incumbents and AI-native entrants, Integration risk from first-ever M&A (Floik acquisition), Legacy product (BizTalk360) exposed to declining Microsoft BizTalk usage, Key-person dependency on founder Saravana Kumar, FX exposure between USD/EUR/GBP revenue and INR cost base, No disclosed profitability, runway, or margin metrics

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report