Skip to content

Commit 3dfe3f1

Browse files
authored
cloud: add compliance and support page (#2308)
1 parent 8c991af commit 3dfe3f1

File tree

2 files changed

+130
-0
lines changed

2 files changed

+130
-0
lines changed
Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
---
2+
title: Compliance & Security
3+
---
4+
5+
# Databend Security Design
6+
7+
Databend Cloud is built with security at its core, providing comprehensive protection for your data through multiple security layers, encryption standards, and compliance certifications.
8+
9+
## Security
10+
11+
Databend Cloud implements multiple security layers to protect your data and control access to your resources:
12+
13+
### Access Control
14+
15+
Databend uses a comprehensive access control system that combines:
16+
17+
- **Role-Based Access Control (RBAC)**: Manages permissions through roles assigned to users
18+
- **Discretionary Access Control (DAC)**: Allows resource owners to directly grant permissions
19+
20+
### Data Protection
21+
22+
**Masking Policy**
23+
Protects sensitive data by controlling how it's displayed to different users, helping you comply with privacy regulations while still allowing authorized access.
24+
25+
**Network Policy**
26+
Controls which IP addresses can connect to your Databend resources, allowing you to restrict access to specific networks or locations.
27+
28+
**Password Policy**
29+
Enforces strong passwords with customizable requirements for length, complexity, and rotation to prevent unauthorized access.
30+
31+
### Secure Connectivity
32+
33+
**AWS PrivateLink**
34+
Enables private connections between your VPC and Databend Cloud without exposing traffic to the public internet. Currently available on AWS only.
35+
36+
## Encryption
37+
38+
### TLS 1.2
39+
40+
We provide end-to-end encryption for all communication. All customer data flows are solely over HTTPS. Connections are encrypted using TLS 1.2 from clients through to the Databend API gateway, ensuring:
41+
42+
- Data confidentiality during transit
43+
- Protection against man-in-the-middle attacks
44+
- Secure client-server communication
45+
46+
### Storage Encryption
47+
48+
Databend Enterprise supports server-side encryption in Object Storage Service (OSS). This feature enables you to enhance data security and privacy by activating server-side encryption for data stored in OSS. You can choose the encryption method that best suits your needs:
49+
50+
- AES-256 encryption
51+
- Customer-managed keys (CMK)
52+
- Hardware security module (HSM) integration options
53+
54+
## Compliance
55+
56+
At Databend, we prioritize data security and privacy, and have achieved key compliances that validate our commitment to protecting your data. Our security practices are regularly audited by independent third parties to ensure we meet the highest industry standards.
57+
58+
### SOC 2 Type II
59+
60+
We have successfully attained SOC 2 Type II compliance, validated by independent auditors. This certification confirms that our systems adhere to the American Institute of Certified Public Accountants (AICPA) trust service criteria for security, availability, processing integrity, confidentiality, and privacy. We continuously monitor and enhance our operational controls to maintain this standard.
61+
62+
### GDPR
63+
64+
Databend adheres to the General Data Protection Regulation (GDPR), the European Union's regulation designed to protect individuals' privacy and personal data. Our compliance includes strict data privacy enforcement, robust encryption, and regular privacy audits to ensure the rights and data privacy of our users across the EU are protected.
Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
---
2+
title: Support Services
3+
---
4+
5+
import LanguageDocs from '@site/src/components/LanguageDocs';
6+
7+
# Databend Cloud Support Services
8+
9+
Databend provides comprehensive Support Services for our Databend Cloud users and customers. Our objective is to deliver exceptional support that reflects the Databend product's core values – high performance, ease of use, and fast, high-quality results.
10+
11+
<LanguageDocs
12+
cn=
13+
'
14+
15+
有关各版本详细支持服务级别,请参阅 [支持服务级别](#support-service-levels)。如需了解更多信息,请联系我们的[销售团队](https://www.databend.cn/contact-us/)
16+
17+
'
18+
en=
19+
'
20+
21+
For detailed information about support service levels across different editions, see [Support Service Levels](#support-service-levels). For more information, contact our [sales team](https://www.databend.com/contact-us/).
22+
23+
'/>
24+
25+
## Getting Support
26+
27+
You can access support through multiple channels:
28+
29+
- **Cloud Console**: Log in to the Databend Cloud console and select **Support → Create New Ticket** from the menu options to open a new support case and view the status of your submitted cases.
30+
- **Status Page**: Subscribe to our [status page](https://status.databend.com) to get notified quickly about any incidents affecting our platform.
31+
- **Documentation**: Browse our comprehensive [documentation](https://docs.databend.com) for guides, tutorials, and reference materials.
32+
33+
## Support Service Levels
34+
35+
Databend Cloud offers different levels of support based on your subscription tier:
36+
37+
| Feature | Personal | Business | Dedicated |
38+
|---------|----------|----------|-----------|
39+
| Logging and tracking support tickets ||||
40+
| 4/7 coverage and response window for Severity 1 issues | 24 hours | 8 hours | 4 hours |
41+
| Response to non-severity-1 issues | 48 hours | 24 hours | 8 hours |
42+
43+
### Severity Levels
44+
45+
- **Severity 1**: Critical issue halting business operations with no workaround
46+
- **Severity 2**: Major functionality impacted with significant performance degradation
47+
- **Severity 3**: Partial loss of functionality with minor business impact
48+
- **Severity 4**: General questions, recommendations, or feature requests
49+
50+
:::note
51+
Please note that only Business and Dedicated customers have a Service Level Agreement (SLA) on Support Incidents. If you are using the Personal edition – while we will try to answer your question as soon as possible, we'd encourage you to also explore our Community resources:
52+
53+
- [Databend Community Slack Channel](https://link.databend.com/join-slack)
54+
- [GitHub Discussions](https://github.com/datafuselabs/databend/discussions)
55+
:::
56+
57+
## Enterprise Support
58+
59+
For customers with mission-critical deployments, our Dedicated edition offers enhanced support options including:
60+
61+
- Priority response times for all severity levels
62+
- Dedicated support engineer
63+
- Proactive monitoring and issue resolution
64+
- Regular health checks and optimization recommendations
65+
66+
Contact our [sales team](https://www.databend.com/contact-us/) to learn more about our enterprise support offerings.

0 commit comments

Comments
 (0)