Security

Informatica Cloud Security Policies

Data transfer orchestration is performed by the Informatica Cloud Secure Agent, which runs locally behind your firewall or can be hosted in the cloud. No data passes through or resides on Informatica servers. Informatica Cloud only stores the metadata required to perform tasks in the multi-tenant repository.

• All passwords are stored in encrypted form using AES encryption
• All data communication over the Internet uses secure protocols using 128-bit SSL encryption: Verisign 128-bit SSL Certificates Version 3

Informatica Cloud has Achieved the Following Certifications:

• SSAE 16
• ISO27001 compliance
• PCI compliance
• Salesforce.com AppExchange certified

Along with these independent certifications, Informatica Cloud conducts regular in-house vulnerability scanning for all infrastructure, servers, databases and applications.

Secure Data Center

• 24x7 secure building and cabinet access
• 24x7 Network Monitoring System (NMS)

Network Application Security

• Network segmentation through firewalls to ensure infrastructure access security
• Load balancer and firewall policies limit the type of access allowed to each network segment
• Multi-layer password protection on all network equipment
• SSL encryption is enforced to all security-related pages, including login page

System Application Security

• Each system and application has an integrated security system
• Administration access to each server requires security token and password authentication
• Password change policy imposed on a regular basis
• Operating systems, servers, routers, firewalls and databases patched with the most current security releases
• All unnecessary ports and services are disabled

Database Security

• Database servers are not accessible to the public Internet
• All database access requests are restricted to application server processes that are separated by the firewall

Informatica Cloud Application Security

• Each customer requires a unique login with password to access Informatica Cloud Services
• Each customer is granted access to Informatica Cloud Services based on roles assigned by the company administrator
• All user access to Informatica Cloud Services is performed through SSL (see Network Application Security)