Third-Party OAuth Token Theft
High severity · Security
Sigma disclosed a campaign targeting Salesloft Drift that resulted in the theft of OAuth tokens, impacting Salesforce customers.
Vendor dossier // sigmacomputing.com
Also known as Sigma
San Francisco, California · Est. 2014 · 501-1,000 employees
Key people
Last updated: Aug 19, 2026, 03:06 PM · Partial / limited public data
Low risk
Proceed
Sigma Computing demonstrates a coherent public security posture with documented SOC 2 and ISO certifications [5]. The vendor proactively disclosed a… Limited public data - verify before relying.
Higher score = greater risk. How we score
Risk Score
Research Coverage
Partial
Evidence Quality
High
Last assessed
Sigma maintains a public Trust Center that documents ISO certifications and SOC 2 compliance . The platform integrates with customer cloud databases and enforces data governance through team-based permissions and immutable hosts . The vendor disclosed a security incident involving a third-party application, Salesloft Drift, where OAuth tokens were stolen in a campaign targeting Salesforce customers . Sigma confirmed that the incident impacted the third-party integration and emphasized its commitment to transparency and customer data protection . The company's status page reports no recorded downtime or active incidents .
Third-Party OAuth Token Theft
High severity · Security
Sigma disclosed a campaign targeting Salesloft Drift that resulted in the theft of OAuth tokens, impacting Salesforce customers.
[funding] Series D Funding
Sigma raised $200 million in a Series D round led by Jared Sleeper and James Kuklinski.
May 16, 2024, 12:00 AM · Source
[breach] Third-Party OAuth Token Theft
Sigma disclosed a campaign targeting Salesloft Drift that resulted in the theft of OAuth tokens, impacting Salesforce customers.
- · Source
How this vendor uses AI/ML with customer data - model providers, training stance, subprocessors, and relevant DPA language when publicly documented.
AI exposure tier: Moderate AI Exposure
Sigma positions itself as an AI apps platform that enables teams to build intelligent applications directly on cloud data warehouses. The product allows users to call warehouse-hosted AI models directly within their workflows and automate operational steps using native AI features. Public disclosures do not specify whether Sigma trains its own models on customer data or provides an opt-out mechanism for AI processing. The platform relies on governed data models and team-based permissions to restrict access to sensitive information during AI-driven workflows. Further documentation on AI data retention and third-party AI subprocessors is not publicly available.
Sigma Computing is a technology company headquartered in San Francisco, California . The firm was founded in 2014 and currently employs between 501 and 1,000 people . The organization has raised substantial venture capital, including a $200 million Series D round announced in May 2024 . Executive leadership includes CEO Mike Palmer, CTO and co-founder Rob Woollen, Chief Architect and co-founder Jason Frantz, and CFO Christina Liu . The company operates as a private entity focused on data analytics and business intelligence solutions for enterprise clients .
Sigma provides an AI apps and analytics platform that connects directly to cloud data warehouses . The software enables business and technical teams to build intelligent, production-ready applications without requiring extensive engineering resources . Key capabilities include a spreadsheet interface, SQL and Python editors, visual builders, and native AI features for automating operational workflows . The platform supports dashboards, governed data models, embedded analytics, and pixel-perfect reports . Market competitors in the business intelligence category include Microsoft Power BI, Tableau Software, and Notion .
Recent corporate updates highlight Sigma's expansion into AI-powered application development and its continued growth in the analytics market . The company secured a $200 million Series D funding round in May 2024, signaling strong investor confidence in its warehouse-native platform strategy . Leadership remains stable with Mike Palmer serving as CEO and guiding the transition toward an AI apps platform . No major regulatory actions, lawsuits, or executive departures were identified in the provided sources . The vendor continues to publish product updates and maintain operational stability .
Fourth parties this vendor relies on - subprocessors, infrastructure, and integrations surfaced from public sources.
Vendors offering a similar product or service - for side-by-side comparison, not a ranking.
Microsoft Power BI
Tableau Software
Notion
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
Risk delta is hidden until two stored snapshots can be compared.
Targeted questions are generated only from unanswered or conflicting controls. The full SIG-lite questionnaire remains on its own route.
25 sources · Generated Aug 19, 2026, 03:06 PM
Every verdict stores the public sources retrieved for this run. Read our methodology.
Input sources · retrieved Aug 19, 2026, 03:06 PM
Corporate overview | Sigma
Company
Our Mission and Journey | Sigma
Company
Fresh off the news of Sigma’s Series E funding, CEO Mike Palmer joined NYSE Live to talk about the AI platform shift and Sigma’s view on the market. “With many technologies, it's the individual… | Sigma
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.
Aug 19, 2026, 03:06 PM
Material findings
1
Years in business: 12 yrs. Material incidents: 1.
Sigma Computing demonstrates a coherent public security posture with documented SOC 2 and ISO certifications . The vendor proactively disclosed a third-party OAuth token theft incident involving Salesloft Drift, showing transparency without indicating a direct breach of its own infrastructure . Funding is strong, leadership is stable, and operational status shows no downtime . Given the lack of direct security incidents and the presence of standard compliance certifications, the vendor is assessed as Low Risk.
No workspace decision recorded for this assessment yet.
The system recommendation is above.
Salesloft Drift
Company
Sigma
Company
Sigma: Funding, Team & Investors | Startup Intros
Company
SIGMA LITHIUM STREAMLINES LEADERSHIP COMBINING KEY ROLES UNDER VETERAN VPs; ANNOUNCES SHAREHOLDER MEETING RESULTS; TO RELEASE 2Q FINANCIALS ON AUG 14, 2025 - Sigma Lithium Corp
Company
Sigma (analytics company) - Wikipedia
Company
Wind Point Partners Acquires SIGMA — Sigma Corporation
Company
Sigma Computing - Market Share, Competitor Insights in Business Intelligence (BI)
Product
Astrato | 8 Best Sigma Computing Competitors and Alternatives for 2026
Product
Top 10 Sigma Software Alternatives & Competitors in 2026
Product
Top Sigma Alternatives & Competitors 2026 | Gartner Peer Insights
Product
10 Best Sigma Computing Alternatives In 2026 · Dot
Product
Sigma Computing
Product
Sigma Computing Trust Center | Powered by SafeBase
Security & risk
News - SIGMA Press Center
News
Sigma-Western Institute of Nursing Research Grant - Western Institute of Nursing
News
News - Sigma
News
Sigma Designs, Inc. | The ClassAction.org Legal News Wire
News
Organizational Call to Action 2025-2027
News
Insights - Two Sigma
News
SIGMA Programme
News
Sigma Computing Status
News
Phi Sigma Kappa's 2026 Day of Giving
News
Sigma Lithium Corp
News