Fair Pay & Worker Respect

For fiscal year 2025, the CEO to median employee pay ratio was 283:1, with the CEO's total compensation at $18,811,603 and the median employee pay at $66,382.

For its UK operations in 2018-19, women earned 70p for every £1 earned by men in median hourly pay, and their median bonus pay was 46p for every £1 earned by men. Commvault Systems Inc employees rely on group health insurance financed by their employer, and executives participate in broad-based company-sponsored health and welfare benefits programs on the same basis as other full-time, salaried employees.

Fair Trade & Ethical Sourcing

Commvault, a software and services provider, does not procure or trade physical commodities, making fair trade certifications and high-risk material sourcing not applicable. The company maintains a Human Rights Policy, Code of Ethics, Ethics and Integrity Reporting Policy, and Supplier Code of Conduct.

Its Human Rights Policy is reviewed at least annually, with the latest review in June 2025. Commvault complies with the UK Modern Slavery Act, the Australian Modern Slavery Act, the US Uyghur Forced Labor Prevention Act, Canada’s Modern Slavery Act 2024, relevant provisions of the EU Corporate Sustainability Due Diligence Directive, and the German Supply Chain Due Diligence Act. It screens employees, customers, and partners against sanctions lists, including the US – DHS Uyghur Forced Labor Prevention Entity List. Potential policy violations can be reported via email or an anonymous Ethics and Integrity Reporting Platform, which has a no-retaliation policy. Suppliers are expected to uphold ethical behavior and comply with applicable laws, including those prohibiting modern slavery and human trafficking. Related achievements and program improvements are reported publicly in the Corporate Social Responsibility Report and Annual Proxy Statement.

Honest & Fair Business

No evidence was found in the provided article to assess Commvault Systems, Inc. against the 'Honest & Fair Business' ethical value.

The article is a marketing piece and contains no specific data points related to regulatory fines, transparency benchmarks, whistle-blower policies, financial restatements, audit coverage, ESG controversies, complaint resolution times, board independence, anti-corruption policies, or third-party verification of ethical claims.

Kind to Animals

Commvault Systems, Inc. is a software and services company. The provided articles state that the company does not engage in animal exploitation.

Given its business model, the company does not produce products requiring cruelty-free certification, does not conduct animal testing, does not have animal husbandry operations, does not source animal products, and its core business does not directly impact wildlife habitats. Therefore, all KPIs related to animal welfare practices, testing, sourcing, and conservation are not applicable to its operations.

No War, No Weapons

The provided articles do not contain specific, concrete data points or actions relevant to any of the 'No War, No Weapons' KPIs. explicitly states it does not contain relevant data.

mentions Commvault's software has an export control classification (ECCN 5D992.c) and a mass market exemption. While this classification indicates the software falls under information security export controls, it does not provide quantitative evidence for R&D investment in dual-use technologies, sales to embargoed regimes, the percentage of exports covered by end-user certificates, or any other specific metric required by the rubric. Therefore, all KPIs are omitted due to lack of evidence.

Planet-Friendly Business

The provided articles do not contain specific quantitative data for Commvault Systems, Inc. (CVLT.US) across the environmental performance indicators. While mentions that the company's headquarters and primary datacenter are LEED-certified.

The total number of facilities is not disclosed, preventing the calculation of a percentage for green-certified buildings. Furthermore, no specific regulatory actions, violations, fines, or compliance issues are mentioned in any of the articles. For all other KPIs, the articles explicitly state a lack of numerical data or specific details regarding emissions, renewable energy, water use, waste diversion, climate targets, or other environmental metrics.

Safe & Smart Tech

Commvault experienced a zero-day vulnerability (CVE-2025-3928) in its web server, potentially exposing customer secrets and M365 environments, exploited by a state-sponsored actor

, . This vulnerability allowed remote attackers to compromise instances by creating and executing webshells . While no unauthorized access to customer backup data was reported , the incident highlights security risks. Commvault addressed the vulnerability in late February 2025 and took remediation actions, including rotating app credentials and enhancing security monitoring , . The company certifies to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) . However, there is a lack of quantitative data on cybersecurity investment, security training effectiveness, and other key security measures , . The CVSS score for CVE-2025-34028 was 10.0 , . Given the severity of the vulnerability and the limited quantitative data, a moderately negative score is warranted.