diff --git a/.env.example b/.env.example
index ad7804d6d..453e71eb6 100644
--- a/.env.example
+++ b/.env.example
@@ -122,6 +122,8 @@
 # CONNECTOR_VERCEL_INTEGRATION_SLUG=
 # CONNECTOR_MONDAY_CLIENT_ID=
 # CONNECTOR_MONDAY_CLIENT_SECRET=
+# CONNECTOR_DATADOG_CLIENT_ID=
+# CONNECTOR_DATADOG_CLIENT_SECRET=
 # PostHog Cloud (US + EU) OAuth needs NO config: it uses the CIMD public-client
 # flow (no app registration, no client_secret), auto-enabled when this
 # deployment is publicly reachable at PROBOD_BASE_URL. Self-hosted PostHog uses
diff --git a/pkg/bootstrap/builder.go b/pkg/bootstrap/builder.go
index aa480c76a..998d58a93 100644
--- a/pkg/bootstrap/builder.go
+++ b/pkg/bootstrap/builder.go
@@ -427,6 +427,7 @@ func (b *Builder) Build() (*probodconfig.FullConfig, error) {
 		"NETLIFY",
 		"CLICKUP",
 		"MONDAY",
+		"DATADOG",
 	} {
 		clientID := b.getEnv("CONNECTOR_" + provider + "_CLIENT_ID")
 		if clientID == "" {
@@ -518,6 +519,7 @@ func (b *Builder) validateRequired() error {
 		{"CONNECTOR_NETLIFY", []string{"CLIENT_SECRET"}},
 		{"CONNECTOR_CLICKUP", []string{"CLIENT_SECRET"}},
 		{"CONNECTOR_MONDAY", []string{"CLIENT_SECRET"}},
+		{"CONNECTOR_DATADOG", []string{"CLIENT_SECRET"}},
 		{"CONNECTOR_VERCEL", []string{"CLIENT_SECRET", "INTEGRATION_SLUG"}},
 	}
 
diff --git a/pkg/bootstrap/builder_test.go b/pkg/bootstrap/builder_test.go
index 295848d2d..20a3ff69f 100644
--- a/pkg/bootstrap/builder_test.go
+++ b/pkg/bootstrap/builder_test.go
@@ -521,7 +521,7 @@ func TestBuilder_Build_AccessReviewConnectors(t *testing.T) {
 	// CONNECTOR_VERCEL_INTEGRATION_SLUG env var.
 	providers := []string{
 		"GITLAB", "BITBUCKET", "HEROKU", "PAGERDUTY",
-		"ASANA", "NETLIFY", "CLICKUP", "MONDAY",
+		"ASANA", "NETLIFY", "CLICKUP", "MONDAY", "DATADOG",
 	}
 
 	env := requiredEnv()