This whitepaper answers those questions as well as many more. Readers will have a clear understanding of how Tableau Online will handle the following security areas:
- Operational security
- User security
- Data security
- Transmission (network) security
- Application security
Read this whitepaper to understand the enterprise-level security features in Tableau Online. See how we've made cloud software easy, accessible, and secure.
We've also pulled out the first several pages of the whitepaper for you to read. Download the PDF on the right to read the rest.
The security and privacy of your data are fundamental to the success of your organization, and this is
why Tableau makes protecting it a top priority. This whitepaper provides an overview of the how Tableau
works to ensure the security and availability of customer data in Tableau Online.
Data published to Tableau Online is protected by enterprise level security features that provide:
- Physical Security
- Operational security
- Data security and privacy
- Account security
- Security of data in transit
- Application security
Underlying all of this is an infrastructure that is continuously monitored for availability, performance,
capacity, and security. The output of this monitoring is used to drive regular improvements that help to
ensure the confidentiality, integrity and availability of your data.
Tableau has implemented a multi-layered security model designed to provide effective protection against
a wide range of known and zero-day threats. As part of Tableau’s incident response protocol, any
breach of security will be reported via the Trust website (https://trust.tableausoftware.com) or directly to
impacted customers. Incident reports will include scope, severity and resolution.
Tableau continuously strives to maintain a secure, world-class hosted service so you can be confident
your data is safe.
SSAE 16 and ISAE 3402
This year, Tableau worked with Moss Adams, an independent Certified Public Accounting firm, to perform an in-depth
audit of the control objectives and activities for Tableau Online. Tableau is proud to announce that the control
procedures for our Tableau Online service have been verified in a SOC 2 Type II report prepared under terms of
the Statement on Standards for Attestation Engagements No. 16 (SSAE 16) and the International Standard on
Assurance Engagements (ISAE) No. 3402 The Tableau Online SSAE 16 report is available upon request.
Tableau Online services are hosted in enterprise-class, SSAE 16 audited data centers that have redundancy built in
to all critical services. The data centers are equipped with fire suppression and other monitoring systems designed
to detect environmental issues and respond to them before they cause an outage. Additionally, the hosting providers
have contracts with suppliers to ensure they can maintain operations in the event of a sustained power outage.
Upon execution of a non-disclosure agreement, Tableau can share the SSAE 16 report for its data center providers
The team responsible for maintaining the Tableau Online infrastructure performs regular maintenance to ensure
system stability, security and performance. Scheduled maintenance windows are posted to the Tableau Trust site
a minimum of two days in advance. Additionally, site administrators receive email notifications of upcoming work
and users all will see a notification upon logging into the Tableau Online site.
Data Security and Privacy
Tableau adheres to the Safe Harbor Privacy Principles published by the US Department of Commerce (“Safe Harbor
Principles”) with respect to personal data about individuals in the European Economic Area and Switzerland that
we receive from our subsidiaries, customers and other business partners. Further information can be found in our
General EEA Safe Harbor Notice.
Backup and Recovery
Backups are made of all critical components. Backup media is encrypted and always maintained in a secured facility.
Disk-based backups are stored in secured data center facilities. Backups made to external backup providers are
encrypted in transit and in storage. Only approved system administrators have access to backups.
Per Tableau Online backup policy, daily backups are retained for 31 days.
These backups enable Tableau to restore the entire Tableau Online system. The backups do not currently allow for
the restoration of a single customer site, meaning Tableau cannot restore individual customer workbooks or data that
were lost due to events other than a system failure.
Want to read more? Download the rest of the whitepaper!
Take to the cloud with Tableau Online.