This action might not be possible to undo. Are you sure you want to continue?
GoodData offers the world’s most powerful cloud BI platform, providing our customers and partners with operational dashboards, advanced reporting and data warehousing at a fraction of the cost and complexity of other approaches. This is done by combining the reach of Web 2.0 with the massive scalability of cloud computing to deliver a new generation of collaborative analytics. GoodData is run by an experienced team and backed by renowned investors. We are headquartered in San Francisco, with engineering in the Czech Republic.
Description of the service
GoodData enables companies to collaborate around the data that drives their business through a powerful, on-demand service. GoodData offers a complete business intelligence platform-as-aservice (BI PaaS), providing operational dashboards, advanced reporting and data warehousing at a fraction of the cost and complexity of other approaches. Aiming to support users to make better business decisions, GoodData provides users to expand their reporting capabilities through: • On-demand Dashboards, Reporting and Analytics • Ad-Hoc Analysis • Collaborative Business Intelligence Built as a complete integrated platform and offered as a service, GoodData has a robust offering of applications that are easily adaptable to business requirements: • GoodData for Salesforce: complete managed service for sales, marketing and support analytics. • Powered by GoodData: enables SaaS and Cloud providers to deliver their customers with embedded dashboards and flexible reporting, without the cost and complexity of building dedicated BI framework from scratch. • Custom BI: applications can be built with any data from any source, leveraging the flexibility of GoodData platform and easy to integrate data loading interface.
operational incidents and system outages. Each employee has a written job description. Risk management The Company has a defined process in place for the on-going identification and management of current business risks. integrity and ethics are all part of GoodData's corporate culture. Job functions and employee performance are reviewed annually. watchful contract review. 1. as appropriate to the individual components of the architecture and platform in general. including event log and application management tools. executive management have real-time access to the systems logs. Comprehensive documentation is maintained to help operational personnel in handling day-to-day issues. Their leadership. GoodData has formalized their hiring practices to determine whether new. Corrective actions are initiated when alert events are triggered. In addition. our business plan. The board of directors and executive management play an important role in the company's tone. and other personnel and consists of four interrelated components. 3. High-level performance and availability reports are produced and discussed during regular management meetings. all of which is logged and resolved in timely manner. Alert notifications are generated and corrective actions are initiated. including the responsibilities to communicate significant issues and exception in a timely manner to an appropriate level of authority within GoodData. Internal and external security assessments are conducted to evaluate the performance against security standards and known threats. Post mortems are convened after any significant service level issue which affects the production environment. The functional organizational structure is in place. including separation of the planning. evaluates risk in different areas and addresses how to manage identified risks. The automated systems listed below monitors the availability. Control environment The control environment at GoodData begins at the highest level of the company. and insurance. Monitoring GoodData utilizes various automated systems. In addition. rehired. Automatic indexing of all events are used to evaluate the service level. . performance. reports and dashboards. 2. executive management.DESCRIPTION OF CONTROLS Internal control is a process effected by GoodData’s board of directors. standardized personnel practices. or transferred employees are qualified to perform their individual job functions and responsibilities. which is evaluated periodically during the year. Risks are identified and managed through prudent business practices that include a high standard of ethics. execution and business operations. Documented escalation policies and procedures provide response guidelines in the event of security breaches. appropriate segregation of duties. providing a framework for operational effectiveness. operational data and security of the GoodData platform.
nature of the internal controls and the means of reporting exceptions to the appropriate higher level of management. including an understanding of how different activities relate to the work of others.§ . Information and communication system Management is involved in the day-to-day operations and provides personnel with an understanding of their individual roles and responsibilities pertaining to internal controls.4. This includes regular company meetings to provide updates on business performance and goals. To maintain timely and effective communication with its customers. knowledge sharing and as a primary point of contact for the customer requesting assistance. Both internal and external communication is based on various communication channels to simplify the process of information flow. GoodData utilizes the Customer Support Portal for service notifications.
CHANGE MANAGEMENT Changes implemented to GoodData’s platform are subjected to the change management processes. High-level overview of implemented changes to GoodData’s platform is maintained for individual releases. as well as proper segregation of duties for the initiation. Requests for change are collected. to provide assurance that changes are authorized. and documented. in-progress and implemented changes are audited and periodically reviewed. Day-to-day change management processes are aligned to Agile methodologies. solution design and implementation. and prioritized using project management tools. properly implemented. they are tested in a pre-production environment before being released into the production system. the document that reflects the Company business objectives. tested. The short iteration and lower scope of the individual changes provides faster validation to the Company’s executive management and to mitigate the risks associated with the change. . The roadmap is updated semi-annually to embrace the changing business requirements. testing. patches and security fixes released by operating system vendor are evaluated by systems administrator to determine critical changes for the production environment. upgrades. Once a set of patches has been identified by the system administrators. with the list of patches and security fixes available on demand from platform monitoring systems. based on iterative and incremental model of development. Operating system changes. The changes to the production environment can be implemented only by authorized members of Operations team. Base component of the change management within GoodData is formal Technology roadmap. approval and verification of changes. Change management framework is in place. All planning. categorized.
trending. This structure provides robust data processing and strengthens the private and security of the customers’ data. both pragmatically and via data integration tools.GOODDATA PLATFORM The architecture of GoodData’s platform is designed to align the individual functional and security aspects into well-defined layers. The foundation of the security constraints lies within the individual layers of the architecture: . snap-hosting and alerting built-in Flexibility of the data model enables each customer to setup and manage the solution to fit their analytical use-cases. Integration The data integration and modeling framework provides a comprehensive API to create a flexible data model and input the business data into GoodData platform. An easy-to-use client application (GoodData CL) is provided as a wrapper to GoodData’s Web API. Multi-tenant constrains GoodData platform provides robust data architecture to accommodate the large number of customers without requiring a separate instance for each individual tenant (customer). addressing typical integration use-cases. Input and output is always protected by SSL encryption technology. Main features include: • fully scriptable data loading interface that easily integrates with any new or existing deployment workflow • support for full/partial uploads.
characterized by a specific security settings (TCP/IP level). not sharing contextual or security information with any other requests. reliable and distributed computing infrastructure. GoodData seamlessly provides a number of the internal processes. is periodically marked for cleanup and consequently disposed of when not longer used. • Instant provisioning of any type of server (node). including out-of-date caches and unreferenced objects. and strictly adhere processing only on a single project. Physical connection to the data store is subjected to a per-project access credentials configured and stored within Control Layer. and relationship between individual users.• User authentication/authorization on Web API layer guarantees valid identity is attached to each request and authorized for access to required resources. • Strict execution separation is maintained by ROLAP Engine. In order to provide reasonable assurance for long term consistency of the output the regression tests are performed to the changes introduced to the GoodData’s platform. meta-model and data stores are configured within Control Layer. • Physical separation of the meta-model and data is established on Storage Cloud where each project is configured as a separate physical entity. All GoodData platform servers are allocated to the respective security groups. The backups are encrypted. Physical Infrastructure GoodData’s on-demand analytics platform is built and hosted on top of the Amazon Web Services (AWS). Every single client request is broken down to sets of task. Multiple providers are available to support various authentication methods (enabling Single-Sign-On and embedded applications). supplemented by an individual instance level stateful firewalls. projects. . • Definitions of scheduled emails are evaluated every 30 minutes to dispatch any outstanding reports. leveraging its scalable. • All operational tools are controlled in respect to the individual projects. including: • Periodic backups are performed several times a day to highly durable storage facilitated by Amazon S3. • Residual information. Platform management The platform management applications are in place to guarantee effectiveness of the day-to-day operational status and to maintain stored data. • Logical security measures. and different availability zones (physical data centers) for redundancy and high-availability • Ability to migrate the infrastructure to any availability zone and geographical region. • Deployment across multiple geographical regions. • Referential integrity is ensured by both automated and on-demand checks.
ideal for backups storage and disaster recovery. using encrypted session (SSH) and public/private key cryptography. which includes proactive alerting to any issues that may affect the operational status of GoodData platform. and periodically reviewed for security vulnerability by a 3rd party as part of general security reviews.99% for Amazon S3. with the regular patch management performed internally (between the major releases of the operation system). with guarantee of 1 hour maximum response time for issues classified as “Urgent”. Amazon AWS commitment is to use all commercially reasonable efforts to guarantee Annual Uptime Percentage of at least 99.999999999%. Maintenance of the operating system images.Linux Operation system images are provided by vendor and Amazon AWS. All keys are stored within credentials vault. . patch management and security hot-fixes to the operating system images are subjected to the regular change management. Access requests/grants/revocation are recorded and periodically reviewed.95% during the Service Year for Amazon EC2 availability. GoodData Operations teams uses direct communication with Amazon using Premium Subscription. The support is provided around-the-clock (24 x 7 x 365). Highly durable and secure storage environment using Amazon S3 guarantees data durability of 99. Access to the production environment is limited to the core operational personnel only. and 99.
Customers should assign appropriate roles to the individual users to prevent unwanted changes to the projects. Service status Customers should subscribe to the official GoodData announcement (available via Support Portal) to stay informed about scheduled maintenances. By accepting platform Terms and Conditions customers acknowledge and agree to control dissemination of such information during data extraction/loading phase. ‘Dashboard only’ role is recommended for users accessing GoodData only via embedded dashboards. This section describes the considerations that complement corresponding controls on our side. The sensitive information we discourage customers to upload. Data modeling and security Customers should be careful to prevent unintentional leakage of the highly sensitive and personal information by exposing them within GoodData. but are not limited to: • personal identiﬁcation • social security • driver’s license • ﬁnancial account or credit card numbers • and other personal information Customers should incorporate GoodData into internal user lifecycle procedures to guarantee the correct permissions and authorization is maintained. . updates to the service and unplanned service interruptions.CUSTOMER CONTROL CONSIDERATIONS GoodData’s platform is design and operated with the assumption that certain policies and controls are implemented by its customers.
This action might not be possible to undo. Are you sure you want to continue?
We've moved you to where you read on your other device.
Get the full title to continue reading from where you left off, or restart the preview.