Cloud Security
1. Organizational Level
As a European company, we develop data.io in consistency with the General Data Protection Regulation (GDPR) of the European Union.
data1.io is built on a four level security concept:
2. Infrastructure Level
data1.io is built on the Microsoft Azure Cloud Infrastructure which is one of the most secure and one of the most powerful PaaS in the world.
3. Programming Level
data1.io uses encryption, a native secure authentication system and security by design as a core concept in our software development process.
4. Application Level
data1.io gives you as a Power User the instruments to define the security rules within your application on a workflow, a dimension tree and a sheet level.
- Legal Framework
Privacy Policy – valid for all registered users and website visitors
Saas Agreement (Terms of Use) – valid for all users with an own application (free or paid)
Data Processing Agreement – valid for all users with an own application (free or paid) - Technical Organizational Measures (TOM)
- Microsoft Azure Cloud
secured by the Trusted Cloud Certifcates
Data center region “Europe West“ (= Netherlands + Ireland)
- Encryption of all data connections with SSL
- Encryption of all application databases
with TDE (Free Plan)
with Always Encrypted (Enterprise Plan + System DB) - Authentication via username and password
based on ASP.Net Identity, passwords stored in encrypted form
we deliberately do not use OAuth (Login via Google, Facebook & Co) - Security by design
- Access Control
Implemented as a combination from defined userrights + the timeframe from the current workflow definition - Row-Level-Security
Implemented as a user specific filter on the dimension tree - Sheet-Level-Security
Implemented as a user-specific filter for the visibility of (Excel) sheets
Please evaluate this security concept with your company specific rules concerning the usage of cloud services.