Security / trust page — Cluvio

Cited by

Facts read from this source

• Regions Report an error

  “The Cluvio platform is deployed and runs in 2 separate locations on Amazon Web Services in the eu-central-1 (Frankfurt, Germany) and us-west-2 (Oregon, US) AWS regions.”

• Named Report an error

  “Cluvio utilizes 3rd party services, such as Recurly (billing), Braintree (credit card processing), Elev.io (in-app help), Sendgrid (email), PagerDuty (alerting) or Sentry, Pingdom and NewRelic (monitoring).”

• Aws ftr Report an error

  “Our infrastructure architecture successfully passed the AWS Foundational Technical Review and CIS AWS Foundations Benchmark v3.0.0.”

• Db connection options Report an error

  “Configuring your firewall to allow inbound access from Cluvio-owned, trusted IP addresses and database specific port numbers. Using transport-layer security (TLS) for database connections, if supported by the database. Proxying database access through an SSH tunnel that trusts a Cluvio-owned public key.”

• Cluvio agent Report an error

  “Use of an open-source Cluvio Agent that establishes encrypted connections to Cluvio from within your secured network, thus requiring no changes to your inbound firewall rules.”

• Query operations Report an error

  “Cluvio analytics are based on SQL and as such do not perform other operations on the database than running specific SQL queries for retrieving database metadata and running SQL queries on request of an authenticated and authorized user”

• Query result cache Report an error

  “The results of the report query executions are stored in a transient cache within a secured Cluvio private network for up to 24 hours, after which all the data are automatically purged and no copies of it are retained.”

• Schema refresh Report an error

  “The schema information is refreshed every 24 hours so that it is kept up to date.”

• Encryption Report an error

  “Encryption of data at rest and in transit, even within private networks.”

• Tls all traffic Report an error

  “All Cluvio communication is performed with transport-layer security (TLS/HTTPS). The Cluvio API is not accessible via unencrypted HTTP connections and clients requesting such connections are immediately redirected to secure transport protocols.”

• Encryption at rest Report an error

  “Cluvio stores all account data in a database that is encrypted at rest and all backups of the data are encrypted as well.”

• Password hashing Report an error

  “User passwords are stored as salted, cryptographic hashes to prevent recovery and abuse even in the case of a compromised database.”

• Connection secret encryption Report an error

  “Database connection passwords or authorization strings are stored with 256-bit symmetric encryption.”

• Authentication Report an error

  “All Cluvio APIs that provide access to the account data require authentication via email and password.”

• Password policy Report an error

  “A minimum length requirement for user passwords of at least 8 characters.”

• Account lockout Report an error

  “Accounts are locked after a certain number of failed login attempts, requiring unlocking through a link that is sent to the account's email address.”

• Password reset Report an error

  “A password reset can be performed through a link that is sent to an account's registered email address.”

• Auditing Report an error

  “Cluvio audits all changes made by a user in the context of an organization. This includes logging in or out (with IP address), running queries and creating, changing or deleting reports, dashboards or any other objects.”

• Audit logs access Report an error

  “The audit logs can be provided to account admins on request.”

• Monitoring Report an error

  “API availability monitoring Server log monitoring Server components and services availability monitoring Browser error monitoring”

• Status page Report an error

  “The summary of the Cluvio platform status, as well as historical incidents, can be viewed at any time at http://status.cluvio.com.”

• Retention Report an error

  “Cluvio never stores results of your analytical queries other than in the context of transient caching of results (kept for up to 24 hours and purged afterwards). Account data are stored as part of a database backup in encrypted form. These backups are kept for a limited time (usually at most 30 days).”

• Physical media Report an error

  “All physical storage devices of Cluvio are on AWS. Amazon AWS employs the Guidelines for Media Sanitization (NIST 800-88 or DoD 5220.22-M)”

• Certifications Report an error

  “Cluvio successfully completed a AWS Foundational Technical Review that is regularly re-evaluated. Cluvio continuously tracks the CIS Benchmark for Amazon Web Services as well as the AWS Foundational Security Best Practices standard.”

• Aws certifications Report an error

  “Sarbanes-Oxley (SOX) compliance ISO 27001 Certification PCI DSS Level I Certification HIPAA compliant architecture SOC1 Audit, SOC2, SOC3 FISMA MediumATO”

• Data sources Report an error

  “These approaches cover both connections to cloud hosted databases like AWS RDS, Redshift, Snowflake, BigQuery or Microsoft Azure, as well as connections to databases installed on your own servers on cloud providers or dedicated hardware behind a firewall.”

• Sql only Report an error

  “Cluvio analytics are based on SQL”

• Dashboard refresh triggers Report an error

  “The report is manually refreshed (i.e. the user hits Refresh on a report or the entire dashboard. The dashboard is accessed and the source data for a report are not present in the Cluvio cache. The dashboard parameters are changed and the results for that specific combination of parameters is not in the Cluvio cache.”

• Alerts Report an error

  “For SQL alerts, the query associated with the alert is executed according to the configured schedule.”

• Custom filters Report an error

  “For custom filters on a query, the query is executed to refresh the values according to the schedule configured for the filter.”

• Architecture Report an error

  “A service-oriented architecture where each service only has limited permissions according to its role.”

• Continuous monitoring Report an error

  “Continuous monitoring of the infrastructure both from inside and outside.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Analyst Data sources, connectors & refresh
• The Data Analyst Access control, administration & portability
• The Data Analyst European sovereignty
• The Finance Controller Data sources, connectors & refresh
• The Finance Controller Access control, administration & portability
• The Finance Controller European sovereignty
• The IT Administrator Data sources, connectors & refresh
• The IT Administrator Access control, administration & portability
• The IT Administrator European sovereignty
• The Managing Director Access control, administration & portability
• The Managing Director European sovereignty
• The SaaS Product Lead Data sources, connectors & refresh
• The SaaS Product Lead Access control, administration & portability
• The SaaS Product Lead European sovereignty
• The Skeptic Data sources, connectors & refresh
• The Skeptic Access control, administration & portability
• The Skeptic European sovereignty