Qohash

Qohash’s Qostodian platform is a data security posture management (DSPM) product that continuously discovers, classifies, and monitors sensitive data across endpoints, file shares, and Microsoft 365 — down to the individual file and data-element level rather than just at the repository or bucket level that many DSPM tools stop at. It’s aimed at organizations in financial services, insurance, and healthcare that need to know precisely where regulated data (PII, PCI, PHI) actually lives across a sprawling, largely unstructured data estate, and to get closed-loop remediation workflows when that data turns up somewhere it shouldn’t be.

Founded in 2018 and based in Quebec City, Canada, Qohash has grown to roughly 75 employees and raised back-to-back funding rounds — a Series A of roughly CAD $8 million and a $17.4 million Series B in 2024, both independently reported in trade press rather than only self-published — for total disclosed funding around $23.7 million.

DSPM as a category represents a genuine shift in how organizations measure data risk, moving from perimeter- and repository-level assumptions to granular, file-level visibility. Qohash competes in an increasingly crowded field that includes Varonis, BigID, and Cyera, and its efficacy claims currently rest on vendor case studies and product descriptions rather than independent third-party audits.