Security & Compliance
With the certifications to prove it.
Trusted by companies with sensitive data to protect. From financial services to online gaming.
Achieving comprehensive security for Hadoop requires policies, procedures, and technologies that go well beyond Hadoop’s built-in security mechanisms.
In order to safeguard customer data and meet customer compliance requirements, Altiscale employs a multi-layered, overlapping approach to data protection, an approach based upon years of deep Hadoop security expertise. As a result, the Altiscale Data Cloud offers a more secure environment than available almost anywhere, whether in the cloud or on-premises.
Altiscale is proud to have its security policies, procedures, and technologies recognized by outside, independent auditors and certification bodies. Altiscale is SOC2 certified, and compliant with the requirements of the Payment Card Industry Data Security Standard (PCI) and the Health Insurance Portability and Accountability Act (HIPAA).
EU Data Protection
For customers based in the EU or customers collecting information on EU citizens Altiscale offers customers the option to be bound by the EU Model Clauses to provide compliance with the EU Data Protection Directive. This allows customers that process data containing personal information of EU citizens to legally export this data for processing within the Altiscale Data Cloud.
A multi-layered approach to security.
The Altiscale Security and Operations teams have extensive backgrounds in security practices, having worked as technology leaders at security-conscious cloud providers such as Yahoo!, Google, and LinkedIn. Since the security landscape is continually shifting with the emergence of new threats, the Altiscale team remains vigilant, continuously adapting and advancing its security practices.
The following include examples of some of the measures that Altiscale takes in order to ensure that your data are safe.
Strict Data Access and User Authentication Measures
Rigorous, verified security policies and procedures for data access. Altiscale adheres to strict, documented policies for data access and privacy, verified by independent auditors.
Isolated customer data environments. Multiple layers of virtualization, security, and monitoring ensure that customers’ data remains fully protected.
Automatic Kerberos authentication. A sophisticated architecture prevents unauthorized access and greatly reduces the potential attack vectors available to intruders.
SSH keys for access to customer environments. Customers generate their own SSH keys for access to the Altiscale cloud.
Secure Data Transfer
Altiscale offers three methods for the secure transfer of data to and from the Altiscale Data Cloud.
- Multiple encryption technologies for access over the public Internet.
- Private fiber cross connects directly to Altiscale.
- Shipment of encrypted physical media.
Monitoring and Threat Response
24x7 monitoring of all systems. Includes comprehensive logging.
Rapid response team. Should the need arise, the Altiscale security rapid response team is ready to move quickly to identify and address emerging security situations. The team conducts regular drills to maintain readiness.
Root cause analysis to prevent future threats. Security issues, when they occur, are thoroughly analyzed to identify the root cause of the incident. Any vulnerabilities are rapidly addressed to minimize future threats.
Hardened Data Centers
Redundant, highly secure colocation facilities. Customers of these datacenters include security-conscious departments of the United States government.
Limited personnel access. Access to facilities is controlled 24x7 by security guards, who ensure that only specific, authorized individuals gain physical entry.
Multi-tier access controls. Security measures to limit access include biometrics, man-traps, and physically isolated cages and cabinets.
A team you can trust.
The Altiscale Security and Operations teams have extensive backgrounds in security practices, having worked as technology leaders at security-conscious cloud providers such as Yahoo!, Google, and LinkedIn.
Since the security landscape is continually shifting with the emergence of new threats, the Altiscale team remains vigilant, continuously adapting and advancing its security practices.
We Take Security Seriously.
To learn more about our security policies, procedures, and technologies
get the security datasheet here.