Tableau Online Security in the Cloud

Overview | What you'll learn: 

Tableau Online brings Tableau to the cloud. Cloud-based software remove the cost and time involved in maintaining a server infrastructure, but they also come with questions: How can I be confident that my data will remain secure? Will my data be recoverable in the case of a system crash? What is the privacy policy?

This whitepaper answers those questions as well as many more. Readers will have a clear understanding of how Tableau Online will handle the following security areas:

  • Operational security
  • User security
  • Data security
  • Transmission (network) security
  • Application security

Read this whitepaper to understand the enterprise-level security features in Tableau Online. See how we've made cloud software easy, accessible, and secure.

We've also pulled out the first several pages of the whitepaper for you to read. Download the PDF on the right to read the rest.

The security and privacy of your data are fundamental to the success of your organization, and this is why Tableau makes protecting it a top priority. This whitepaper provides an overview of the how Tableau works to ensure the security and availability of customer data in Tableau Online.

Data published to Tableau Online is protected by enterprise level security features that provide:

  • Physical Security
  • Operational security
  • Data security and privacy
  • Account security
  • Security of data in transit
  • Application security

Underlying all of this is an infrastructure that is continuously monitored for availability, performance, capacity, and security. The output of this monitoring is used to drive regular improvements that help to ensure the confidentiality, integrity and availability of your data.

Tableau has implemented a multi-layered security model designed to provide effective protection against a wide range of known and zero-day threats. As part of Tableau’s incident response protocol, any breach of security will be reported via the Trust website ( or directly to impacted customers. Incident reports will include scope, severity and resolution.

Tableau continuously strives to maintain a secure, world-class hosted service so you can be confident your data is safe.

Operational Security

SSAE 16 and ISAE 3402

This year, Tableau worked with Moss Adams, an independent Certified Public Accounting firm, to perform an in-depth audit of the control objectives and activities for Tableau Online. Tableau is proud to announce that the control procedures for our Tableau Online service have been verified in a SOC 2 Type II report prepared under terms of the Statement on Standards for Attestation Engagements No. 16 (SSAE 16) and the International Standard on Assurance Engagements (ISAE) No. 3402 The Tableau Online SSAE 16 report is available upon request.

Data Centers

Tableau Online services are hosted in enterprise-class, SSAE 16 audited data centers that have redundancy built in to all critical services. The data centers are equipped with fire suppression and other monitoring systems designed to detect environmental issues and respond to them before they cause an outage. Additionally, the hosting providers have contracts with suppliers to ensure they can maintain operations in the event of a sustained power outage.

Upon execution of a non-disclosure agreement, Tableau can share the SSAE 16 report for its data center providers upon request.

System Maintenance

The team responsible for maintaining the Tableau Online infrastructure performs regular maintenance to ensure system stability, security and performance. Scheduled maintenance windows are posted to the Tableau Trust site a minimum of two days in advance. Additionally, site administrators receive email notifications of upcoming work and users all will see a notification upon logging into the Tableau Online site.

Data Security and Privacy

Safe Harbor

Tableau adheres to the Safe Harbor Privacy Principles published by the US Department of Commerce (“Safe Harbor Principles”) with respect to personal data about individuals in the European Economic Area and Switzerland that we receive from our subsidiaries, customers and other business partners. Further information can be found in our General EEA Safe Harbor Notice.

Backup and Recovery

Backups are made of all critical components. Backup media is encrypted and always maintained in a secured facility. Disk-based backups are stored in secured data center facilities. Backups made to external backup providers are encrypted in transit and in storage. Only approved system administrators have access to backups.

Per Tableau Online backup policy, daily backups are retained for 31 days.

These backups enable Tableau to restore the entire Tableau Online system. The backups do not currently allow for the restoration of a single customer site, meaning Tableau cannot restore individual customer workbooks or data that were lost due to events other than a system failure.

Want to read more? Download the rest of the whitepaper!

Take to the cloud with Tableau Online.

Continue Reading...

You might also be interested in...