Datadog CSM
Connect Datadog CSM to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Datadog CSM to collect observability evidence automatically.
| Category | Observability |
| Connect with | API token |
| What a connection produces | Automated evidence collection |
Connect with an API token
-
In Datadog CSM:
- API key: in Datadog go to Organization Settings › API Keys, click New Key, enter a name, and click Create API key.
- Application key: go to Organization Settings › Application Keys, click New Key, enter a name, create it, and set read-only authorization scopes when creating or editing it.
- Copy the application key secret immediately; with One-Time Read mode it cannot be retrieved later.
Where to find the other values:
- Base URL (optional): Your Datadog site URL, for example https://app.datadoghq.com. With a custom domain, find the site at the top of My Preferences (profile avatar, lower-left).
Datadog CSM shows the secret only once, so copy it before you leave the page.
Datadog CSM's public documentation does not cover every step.
Source: docs.datadoghq.com, docs.datadoghq.com, checked 2026-10-07.
-
On Compliance › Connectors, open Datadog CSM, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Datadog CSM and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | A1.1, CC6.2, CC7.1, CC7.2, CC7.3, CC7.4 | 11 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.5.25, A.6.5, A.8.6, A.8.8, A.8.9, A.8.15, A.8.16 | 11 |
| HIPAA Security Rule | Automated tests | 164.308(a)(1), 164.308(a)(3), 164.308(a)(4), 164.312(b) | 10 |
| PCI DSS | Automated tests | 2.2.1, 6.3.3, 7.2.4, 8.2.5, 10.4.1, 10.5.1, 11.3.1 | 10 |
| NIST CSF 2.0 | Automated tests | DE.AE-02, DE.AE-06, DE.CM-01, DE.CM-09, ID.AM-02, ID.RA-01, PR.AA-01, PR.AA-05, PR.PS-01, PR.PS-04 | 11 |
These tests are switched on per workspace by the Safeguard team.
Datadog connect to the same provider as Datadog CSM, and these tests run for a connection made through any of them.
Related
- Observability connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks