CData Software: Data Connectivity, Replication and Governed AI Access

The product family serves application developers, database administrators, integration engineers and business-data teams. A broker can use these tools to connect its CRM, finance applications and reporting environment; an independent software vendor can arrange embedded connectivity. CData is a general enterprise-data supplier, so the presence of financial-system connectors does not establish a broker-specific trading integration.[2][5]

DBAmp illustrates the difference between live access and a maintained copy. A SQL linked server can query Salesforce on demand; SF_Mirror and SF_Replicate create or refresh local SQL Server tables. SQL Agent and SSIS can schedule the work, and bulk procedures can write staged changes back. Salesforce permissions still apply, while the local mirror also falls under the firm’s SQL Server access, backup and retention controls.[6]

CData’s SSIS catalog includes finance, CRM and enterprise applications alongside files and messaging sources. This is useful when a firm already operates Microsoft integration jobs: connector components can be added to that environment without adopting Sync as the scheduler. The two approaches still require their own runtime, connection configuration and licensing.[7]

Pricing is mixed across the portfolio. Public entry prices coexist with negotiated enterprise, deployment and embedding arrangements. The following figures are the USD prices displayed when checked on 21 October 2026.[9][10]

Connect AI has a separate fair-use policy: the standard allowance is 100 million rows returned per month unless the contract specifies otherwise. CData also monitors processing before aggregation and total transfer, and may restrict use approaching or exceeding policy limits. This is a different measurement from Sync Standard’s processed-row allowance.[13]

The Cloud Services Agreement, last modified 7 October 2026, generally treats fees as non-refundable and provides automatic renewal. Monthly subscriptions can be cancelled on notice; other terms renew for a year unless notice is given at least 30 days before expiry. The applicable order sets the purchased service scope.[14]

For Connect AI, the documented starting sequence is to create the account, authorize the chosen agent against the remote MCP server, add a source connection and test a query. A public sample file is available to prove the connection before introducing operational records. In a production rollout, the choice between a shared source account and individual credentials also determines whose permissions the source system sees.[15][16]

Sync records job status, runtime and rows affected, with separate source, destination and replication-engine logs. An optional automatic retry reruns failed tasks once. Transfer and Verbose logging can include raw transferred records even though connection passwords are masked, so diagnostic files need the same handling as the underlying financial or customer data. A CDC job that loses its source-log position requires recovery rather than an assumption that it resumed correctly.[19]

Customer-hosted Sync upgrades are operational changes: the documented Windows and Linux procedures stop and restart the service, and major-version upgrades require new product keys. The .NET edition has been deprecated since 2024. Migration from its SQLite configuration database requires export/import into the cross-platform edition; existing PostgreSQL, MySQL or SQL Server configuration stores follow a different path, with a backup recommended before their tables are upgraded.[20]

Active customers receive standard technical support, with the customer portal, product documentation, knowledge base and community supplying the public support routes. Premium Support adds prioritized case handling and telephone access under a separate paid agreement. Trial users can use the presales support channel to investigate compatibility before licensing.[21]

These are commercially reasonable response objectives, not guaranteed resolution times; the terms say missing an objective is not itself a breach. Applicable business hours are Monday–Friday, 09:00–18:00 EST, CET and/or IST, excluding local holidays. Continuous helpdesk or knowledge-base availability is separate from staffed engineering coverage.[22]

Connect AI separates administrative privileges from data permissions. Its roles are additive: membership in a restrictive role does not cancel access granted by another role. Source authentication can use a shared service account or each user’s own credentials, making that configuration a material part of access governance.[16]

CData’s security page states SOC 2 Type II and ISO 27001:2022 coverage and offers a security kit containing attestation, certification and assessment materials on request. Those underlying reports were not available in the public materials reviewed. These are information-security assurances; the products supply data infrastructure rather than investment execution, client-money custody or a financial-services authorization.[24]

For OpenAI-connected features covered by the Cloud Services Agreement, metadata and customer data may be sent to Azure OpenAI; the agreement states that CData and that partner do not use the data to train models. Customers remain responsible for source-account rights and third-party terms. This clause should not be generalized to every external model or client an institution chooses to connect.[14]

The published cloud contracting entity is CData Software, Inc., a Delaware corporation. CData lists its office at 101 Europa Drive, Suite 110, Chapel Hill, North Carolina, and identifies Amit Sharma as CEO and co-founder.[14][23][1]

In June 2024, CData announced approximately US$350 million of growth capital from Warburg Pincus and Accel, with existing investor Updata Partners retaining a significant interest. The announcement describes growth financing, rather than a sale into another software provider’s product family.[25]

The April 2024 acquisition of Data Virtuality added enterprise virtualization and a governed semantic-data layer to CData’s existing connectivity and replication capabilities. Data Virtuality therefore belongs inside this provider’s corporate scope. Its historical product identity should not be treated as evidence of a separate current supplier or a particular present-day licence package.[26]

Operator

CData Software, Inc.

Service scope

Enterprise-data connectivity, replication, managed file transfer, API publication and governed AI access for financial and other applications.

Customer types

Financial institutions; Brokers and financial-service technology teams; Data and integration engineers; Software vendors; Database administrators

Delivery

SaaS; On premises; Hosted; API; Hybrid

Pricing publication

Public and quoted pricing

Headquarters

Chapel Hill, North Carolina, United States

Platforms

CData Drivers; Connect AI; CData Sync; CData Arc; CData API Server; CData DBAmp; SQL SSIS tools

Integrations

ODBC, JDBC, ADO.NET and Python; MCP; REST and OData; Salesforce and SQL Server; Snowflake, Databricks and OneLake; SFTP, AS2 and AS4

Pricing scope

Public Connect AI and Sync entry prices; other editions and commercial deployment scope are quoted.

Implementation

Configure source credentials, permissions and consuming clients or pipeline jobs; customer-hosted products also require runtime and upgrade management.

Support

Standard support and customer portal; paid Premium Support has business-hours severity-based response objectives.

Permissions and regulatory scope

Data-integration software and cloud services; security assurance and source access controls do not constitute a brokerage or custody permission.

Provider metadata checked 21 Oct 2026Source 14Source 23Source 2Source 3Source 4Source 5Source 9Source 10Source 21Source 22Source 24Source 26

Connect AI’s expanding Gateway requires a release-status distinction. CData opened early access to the broader Gateway on 29 September 2026, describing LLM routing, governance and a context engine that combines schemas with business definitions and reviewed corrections. The previous day’s product explanation explicitly classed the MCP Gateway as available and the AI Gateway, Context Engine and Policy Engine as limited access. These announcements do not establish unrestricted general availability for every described capability.[27][28]

The published cloud agreement limits early-access services to evaluation and testing, excluding production, mission-critical and commercial use. A firm considering the new Gateway should distinguish its existing contracted connectivity from an early-access component’s permitted use.[14]

CData’s Carrington Mortgage case study describes API Server exposing loan/customer information through stored procedures keyed by identifiers such as a loan number or telephone number. The useful implementation detail is selective data exposure for internal applications and IVR support. The reported reduction in API delivery time is a vendor-published customer outcome, not a benchmark independently reproduced for this profile.[29]

Older customer-hosted installations also have a documented security history. CData’s March 2024 Jetty notice covers authentication-bypass/path-traversal issues in affected Java editions of API Server, Arc, Connect and Sync, with product-specific fixed builds and links to updates. Its scope excludes the .NET edition and installations using another servlet container. The notice is a historical patch advisory, not evidence that a current deployment has been compromised.[30]