Cloudera EDH Self-Managed Cloud

Service scope

Service constraints: EDH is available for AWS, Azure, Google and On-premise.
System requirements: You need to have an existing Cloud account

You have the required IaaS and Enterprise Security

User support

Email or online ticketing support: Email or online ticketing
Support response times: We provide 24/7 email and online support as part of our subscription
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Support response times
24 x 7 Support Subscription
S1, within 1 hour, updates every 4 hours
S2, within 2 hours, updates every day
S3, within 8 hours, updates every 3 days
S4, within 24 hours
Support available to third parties: Yes

Onboarding and offboarding

Getting started: We have comprehensive documentation online.

Customers can self-service their on-boarding, or can use Cloudera's expert Professional Services.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: Customer data that is processed by EDH resides within the Customers own Cloud managed service on on-premise data stores. The customer always has full access to the data and associated logging information.

When a customer is off-boarded their account information and metadata about the service is covered under our standard Terms and Conditions and Privacy Policy.

Cloudera does not store any personal data. However, Cloudera does store certain operational data (diagnostic bundles, telemetry data, support cases, and even configuration data between clients. Everything is stored in a multi-tenant environment with software controls in place to create separation between clients.
End-of-contract process: The customer also has the option of closing their account and at this stage access to Support for EDH will be removed.

Cloudera does not store any personal data. However, Cloudera does store certain operational data (diagnostic bundles, telemetry data, support cases, and even configuration data between clients. Everything is stored in a multi-tenant environment with software controls in place to create separation between clients.

Using the service

Web browser interface: Yes
Using the web interface: The primary user interfaces are browser based.

Administrators can setup the service, configure Cloud resources, environments and user roles.

Altus Users can configure clusters, manage the lifecycle of clusters, run jobs and analyse workloads.
Web interface accessibility standard: None or don’t know
How the web interface is accessible: Cloudera undertakes Accessibility testing and incrementally improves accessibility at each release. While we have not yet achieved EN 301 549 Cloudera is committed to continual improvement toward these standards.
Web interface accessibility testing: Cloudera contracts an independant 3rd party to test and advise on gaps in accessibility.
API: Yes
What users can and can't do using the API: The API provides the same capabilities as the Web UI.
The API is provided as an SDK for Java.
API automation tools: Ansible

OpenStack

Puppet

Other
Other API automation tools: OpenShift

Integrated CLI
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

HTML

Other
Command line interface: Yes
Command line interface compatibility: Linux or Unix

MacOS
Using the command line interface: The CLI provides the same capabilities as the Web UI.

Scaling

Scaling available: Yes
Scaling type: Manual
Independence of resources: All cloud based resources remain under the control and management of the customer. The cloud provider (AWS, Microsoft Azure, Google) provides isolation between resources at an account level.
Usage notifications: Yes
Usage reporting: API

Email

Analytics

Infrastructure or application metrics: Yes
Metrics types: Number of active instances

Other
Other metrics: Workload Analytics
Reporting types: API access

Real-time dashboards

Regular reports

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Managed by a third party
Penetration testing frequency: At least once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: For in-place protection of data being processed we utilise the 3rd party encryption options for (Amazon Web Services) S3 and Microsoft Azure (ADLS).
Data sanitisation process: No
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery: Yes
What’s backed up: Data can be backed up to local or cloud storage
Backup controls: Customers have full control over their data and backup strategy. Services are included to enable and carry out backup to Cloud Storage services.
Service metadata is backed up by Cloudera and this process is fully automated as part of the service.
Datacentre setup: Multiple datacentres with disaster recovery
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users can recover backups themselves, for example through a web interface

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: We run the provisioning system for customers to create/configure/terminate clusters and submit jobs. The Altus service will have high up-time and will be monitored by an on-call SRE team.
Approach to resilience: Uses distributed CDN, further information available on request.
Outage reporting: We provide a public dashboard via a separate service that shows times of disruption, outage and performance against SLAs.

Identity and authentication

User authentication: Public key authentication (including by TLS client certificate)
Access restrictions in management interfaces and support channels: Cloudera uses a SSO framework. All customers need to be registered with Cloudera in order to access management interfaces and support channels.
Access restriction testing frequency: At least once a year
Management access authentication: Public key authentication (including by TLS client certificate)

Dedicated link (for example VPN)

Username or password
Devices users manage the service through: Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: No audit information available
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Frank, Rimerman Information Security
ISO/IEC 27001 accreditation date: 23/01/2020
What the ISO/IEC 27001 doesn’t cover: The certificate can be provided on request
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: SOC 2 Type II Certified

ISO 27001

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Cloudera aligns to SOC2, GDPR, CCPA and EU-US Privacy Shield.
Please refer to the service definition document.

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: Cloudera aligns to SOC2 and SO27001 industry standards.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Cloudera has a well defined set of policies of implementing patches in a safe manner, releasing IT security paches in a timely manner, and conducting thorough vulnerability scans. For all software running within the customer's environment (including CDP Public Cloud environments), we communicate the availability of these patches (via TSBs) in a timely manner so that our customers can install these patches as needed. For Cloudera's cloud service endpoints running in Cloudera's environment, we install these patches directly.
Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach: Cloudera has a well defined set of policies of implementing patches in a safe manner, releasing IT security paches in a timely manner, and conducting thorough vulnerability scans. For all software running within the customer's environment (including CDP Public Cloud environments), we communicate the availability of these patches (via TSBs) in a timely manner so that our customers can install these patches as needed. For Cloudera's cloud service endpoints running in Cloudera's environment, we install these patches directly.
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: Cloudera has a well defined set of policies of implementing patches in a safe manner, releasing IT security paches in a timely manner, and conducting thorough vulnerability scans. For all software running within the customer's environment (including CDP Public Cloud environments), we communicate the availability of these patches (via TSBs) in a timely manner so that our customers can install these patches as needed. For Cloudera's cloud service endpoints running in Cloudera's environment, we install these patches directly.

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
Who implements virtualisation: Third-party
Third-party virtualisation provider: Amazon Web Services, Microsoft Azure or Google Cloud Platform
How shared infrastructure is kept separate: Please refer to the 3rd party for options in isolating resources and selecting shared or dedicated resources.

Energy efficiency

Energy-efficient datacentres: Yes
Description of energy efficient datacentres: We do not run our services in our own data centre. We use a mix of public cloud providers including AWS and Azure and would defer to their energy-efficiency statements.

Social Value

Tackling economic inequality

Cloudera has, for many years, provided an extensive apprenticeship and internship programme, targeted at individuals who may not traditionally apply or be exposed to employment in the IT sector. Cloudera University has and does provide extensive training and educational courses, free of charge, to users who select them. Cloudera also provides outreach and mentorship programmes through Universities across the Globe. It is our mission to train, develop and educate the next generation of IT professionals, including those who have been materially affected by the Covid-19 pandemic.

Cloudera provides a Data Platform which can be configured and made available within a matter of minutes - in this way we help small and medium sized organisations to truly realise the value of their data and enable them to compete with large enterprises.

Cloudera also place a significant emphasis on knowledge transfer as part of our services - in this, we seek to train and educate our clients to the point where they become almost completely self-sufficient in the operation of our product lines and are left able to re-use these skills in other areas or in other employment. As part of this, customers are able to work towards a recognised certification in a number of different subject areas which can then be used in the future.

Pricing

Price: £0.02 an instance an hour
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Customers have access to Support for a limited time period. The trial includes resource limits. All functionality is included in the trial period.

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Pricing

Service documents

Cookies on Digital Marketplace

Cloudera EDH Self-Managed Cloud

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Social Value

Pricing

Service documents