Domo, Inc.

Domo: Business Intelligence, Data Integration Platform

The Domo Business Cloud® is a Modern BI low-code data app platform providing data connectors; data trransformation, and visualisation to combine data and manage business process automation and data-to-decision workflows. A cloud analytics and mobile reporting platform to enable data driven transformation and improve digital maturity.

Features

  • BI Reports: self-service visualisation, interactive dashboards, mobile analytics, embedded analytics
  • Connectors: SaaS, JSON, On-Premise, Databases, APIs, Federated Query, Writeback. Data-Mesh
  • Data integration: Graphical ETL, cleanse, transform, reverse-ETL, writeback, SQL,
  • Operationalise analytics: data science & AI R, Python, Jupyter Notebooks
  • Multi-cloud data management including Azure, Snowflake, Redshift, GCP Big Query
  • Data Governance: Manage, catalogue, view lineage, logging, access permission
  • Low code data apps framework for scaled custom web applications
  • Power BI Insights from data. Workflows power automate business processes
  • Secure: 2FA, BYOK encryption, SSO, row-level permissions, custom roles, logging
  • Apps: Mapping, Natural Language Query, Forecasting, Scheduling, Invoice Automation, Forms

Benefits

  • Resiliant automated data refresh cloud connectors and on-premise to cloud
  • Cloud scale, High performance big data cloud storage and query
  • Low-Code serverless application development SDK. Dynamic data apps with action
  • Data modernisation: Automate data pipelines, data transformation and data lineage
  • Mobile BI and Collaboration. MS Teams integration. Agile data management
  • Governed and secure data. custom permissions, activty log, auditing capabilities.
  • Data-driven culture: easy-to-use, user adoption, evidence based decisions. Executive dashboarding
  • Multi-cloud integration. Data Mesh aid data discovery data catalogue,
  • Cost reduction, platform modernisation and data consolidation. Improve operational efficiency.
  • Data sharing, executive reporting, automated reporting, user alerting, data democratisation

Pricing

£113 to £1,600 a user a year

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mark.green@domo.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

3 4 7 0 3 1 5 4 8 5 3 4 3 5 4

Contact

Domo, Inc. Mark Green
Telephone: +44 7818 475434
Email: mark.green@domo.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
AWS, Microsoft Azure, Google BigQuery, Snowflake, Amazon S3, Redshift, Salesforce, Salesforce Marketing Cloud, Google Analytics, AdWords, Adobe Analytics, Facebook, Postgres, SQL Server, NetSuite, Jira, R, Box, Quickbooks, Marketo, Surveymonkey, Qualtrics, Zendesk, ServiceNow, Oracle, Anaplan, Brandwatch, Youtube, Adaptive Insights, SAP, MongoDB, Sprinklr, Teradata, Informatica, Workday, Dropbox, Zoho, Sage, Vertica, Teradata, Twitter
Cloud deployment model
Public cloud
Service constraints
Domo is offered as cloud hosted only. With integrations to cloud and on-premise datasources. It requires an internet connection.
System requirements
  • Browser: Most recent non-beta versions of Chrome, Firefox. Edge, Safari
  • Mobile app on iOS and Android via AppStore(s)

User support

Email or online ticketing support
Email or online ticketing
Support response times
Free online community support, knowledge base, online videos and training. Online ticketing support.

Support response times reflect the premium support package purchased. From 4 hours
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
All Clients access online Domo Community; online Domo Knowledge Base; Online Portal Support.

Bronze Package: 2 Authorized Support Contacts, 24/7 Phone and online ticketing. 8 public virtual courses; 2 private virtual courses; 12 certifications.
Silver Package: 2 Authorized Support Contacts, 24/7 Phone and online ticketing. 8 public virtual courses; 2 private virtual courses; 12 certifications. Response Targets: L1 6 Hrs, L2 10hrs, L3 14hrs.
Gold Package: 3 Authorized Support Contacts. Named Advisor, 24/7 Phone and online ticketing. Proactive maintenance communication and planning, includes 3 Services Days; 2 Custom Education days. Sr Technical Advisor case management. 3 Authorised contacts; 8 public virtual courses; 2 private virtual courses; 12 certifications. Response Targets: L1 4 Hrs, L2 8hrs, L3 12hrs.

Additional Onsite Support at SFIA Rates.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Domo offers training tailored to the client and the end users. We offer self-paced training, virtual instructor-led training, in-person training, train-the-trainer, as well as various levels of proficiency certifications. Domo provides training based on user roles as well, including specialized training for data consumers, Domo professionals, data specialists, administrators, and executives.

There are also three core Domo offerings available within our Help Center, accessed through your own instance of Domo.
• Domo University has created elearning inside of the platform, including modules complete with surveys, guided activities, videos, and quizzes.
• Domo Knowledge Base includes access to 950+ how-to articles, best practices, and feature descriptions within Domo.
• Domo Community (Dojo) is our online customer community, a place to connect, ask questions, find answers, and share best practices with other clients.
Service documentation
Yes
Documentation formats
HTML
End-of-contract data extraction
Upon a customer’s written request, Domo will either return or destroy all customer data and materials, in a standard and commercially reasonable format as the customer may request at no additional cost.
End-of-contract process
Return of materials in an unusual or non-standard format, based on Domo’s usual reasonable practices, may be billed at Domo’s then current-rate for professional services.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
A key Domo differentiator is the seamless content optimization between desktop (browser) and mobile. Domo includes native apps for Android and iOS, in which all dashboards and reports are automatically and instantly optimized for mobile viewing and interacting. Report and dashboard creation, ETL capabilities, and data connection and management functions are only available via supported web browsers.
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
Three core Domo offerings available within our Help Center, accessed through your own instance of Domo:
• Domo University has created elearning inside of the platform, including modules complete with surveys, guided activities, videos, and quizzes.
• Domo Knowledge Base. Domo users have access to 950+ how-to articles, best practices, and feature descriptions within Domo.
• Domo Community (Dojo). Dojo is our online customer community, a place to connect, ask questions, find answers, and share best practices with other clients.

For more advanced support, clients may create and track a support ticket in the Support Portal within Domo.https://knowledge.domo.com/Welcome/Getting_Started/06Getting_Help
Accessibility standards
None or don’t know
Description of accessibility
Domo evaluates the platform against WCAG 2.1 AA, however the platform does not meet all of the guidelines within this level. We conduct evaluations periodically using the Voluntary Product Accessibility Template (VPAT). Due to the size and complexity of the Domo platform, we conduct several VPAT assessments that assert our conformance to those standards for each part of the product. We will furnish these VPAT documents at the request of the client.
Accessibility testing
We conduct evaluations periodically using the Voluntary Product Accessibility Template (VPAT). Due to the size and complexity of the Domo platform, we conduct several VPAT assessments that assert our conformance to those standards for each part of the product. We will furnish these VPAT documents at the request of the client.
API
Yes
What users can and can't do using the API
Domo currently provides a User and a Data API. The User API allows for programmatic access to creating and managing user and groups. The Data API allows for programmatic access to upload and export data to and from the Domo database.
API documentation
Yes
API documentation formats
HTML
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Domo is extremely customizable. User features for custom colors in charts, backgrounds and layouts in dashboards, custom chart types. Users can customise alert notifications. Included App development framework provides complete custom applications in choice of development languages. Administrators and Domo owners can use APIs to automate and bulk change access, data, users and permissions. Custom role types and permissions.

Scaling

Independence of resources
As a fully SaaS platform, Domo manages all aspects of infrastructure, scalability, redundancy and provisioning of the system, and automatically scales resources up and down based on customer size and usage. Domo is a built on a specialized massively parallel columnar database architecture designed to handle data sets with billions of rows of data using server side processing to provide unprecedented executive level access and user experience while viewing and drill down into massive data sets. Customers do not have to manage any part of the Domo infrastructure, scaling is transparent to all of our customers.

Analytics

Service usage metrics
Yes
Metrics types
Using Domo’s Admin settings, customers may manage security, content, groups and other essential information within their Domo instance. Role Management enables admins to create and assign functionality, and we offer bulk imports, a public API for user and group management, and an Excel plugin to streamline administration processes.

All end user activity in the Domo Instance is logged. This log includes at minimum, what action was taken, when it happened, and who initiated the action. Customers can also integrate their own Domo Instance logs directly into their in-house Security Information Event Management (SIEM) tools and internal incident response processes.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Other
Other data at rest protection approach
Domo encrypts all customer data that is stored at persistent storage within Domo. For this purpose, Domo utilizes Advanced Encryption Standard (AES) algorithm with a key size of 256 bits.
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Customers have the ability to import and export their own data from and through the Domo Service as a standard feature.
Data export formats
  • CSV
  • Other
Other data export formats
  • Email
  • Print
  • CSV
  • PPT
  • XLSX
  • API / JSON
  • ODBC (Subject to Connector)
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats
  • Search 'Domo Appstore Connectors' to see our 1000+ connector ecosystem
  • Local/Cloud Files (Spreadsheets, csv, XLS, ODT, XML, email-to-domo, SFTP, Dropbox)
  • Export: Manual export to CSV, Excel, Annotated Image, Scheduled email
  • Cloud Applications: 800+ fully-managed API SaaS connectors, JSON, webhook
  • Datalakes Warehouses: BigQuery, RedShift, S3, Azure, SQL, Snowflake, Teradata, Oracle
  • Workbench for on-premise (firewall) relational databases, files and applications
  • Federated query (no data movement): JDBC, cache, data virtualisation
  • Bi-directional write-back connectors integrate data back into applications and databases
  • Internet of Things IoT, Kinesis, Kafka, Aurora, Particle, OPC, MQTT
  • Custom Connectors Development Studio IDE. API (Python, Java), CLI

Data-in-transit protection

Data protection between buyer and supplier networks
Other
Other protection between networks
Domo uses a combination of secure protocols, including TLS, with only a limited number of trusted ciphers supported. SSH, and SFTP is also supported, where appropriate, for the secure transfer of data. Domo does not allow clear text or unencrypted data communication protocols. Domo’s best practice ensures that all Domo customers use at least one of the provided secured services (TLS, SSH, SFTP).
Data protection within supplier network
Other
Other protection within supplier network
Domo uses a combination of secure protocols, including TLS, with only a limited number of trusted ciphers supported. SSH, and SFTP is also supported, where appropriate, for the secure transfer of data. Domo does not allow clear text or unencrypted data communication protocols. Domo’s best practice ensures that all Domo customers use at least one of the provided secured services (TLS, SSH, SFTP).

Availability and resilience

Guaranteed availability
Domo provides 99.9% system uptime during core business hours. There are variables that are client managed that play a part in performance, such as data volumes, network bandwidth, usage, etc.
Approach to resilience
The Domo Platform provides state of the art redundancy management which allows for failover and high availability. Domo’s critical systems are automatically backed up on an immediate, or nightly basis as appropriate. Backups are stored using online, redundant, geographically distributed, and encrypted systems. In the event of a disaster, we maintain full production environments of the Domo platform in multiple regions. Domo spreads our operations across multiple zones within the regions for availability purposes. AES 256-bit encryption is used. Backups are tested each time Domo pushes new code into production, which can be multiple times per month.
Outage reporting
Domo publishes system status updates and scheduled maintenance at status.domo.com

For any emergency event that requires the system to be taken off-line, affected customers will be immediately notified via a splash page that Domo is aware and working the issue. An email and Dojo (community) update will be issued upon remediation.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Other user authentication
SAML/Federated Identity single sign-on, and “just in time” provisioning of users when they authenticate for the first time. For organizations using the native Domo account and passwords, passwords are stored using a salted SHA-512 hashing algorithm. Customers add email, name, group, title, and phone to the SAML Response. LDAP groups can be used to govern data access like ad hoc groups created in Domo.
Admins can control specific email domains and IP whitelisting for their instance which could restrict to government network IP ranges.
Domo also offers the option of implementing an extra layer of security by supporting multi-factor authentication.
Access restrictions in management interfaces and support channels
Access to client data is on a need to know basis only. Users are given no access until specifically granted. Domo will monitor access regularly, and each client may also monitor these access rights for their instance. Administrative privileges are reviewed quarterly and access is restricted to approved users who need a valid reason for up to 24 hours per session. All access is logged, and reviewed. Domo utilizes ArcSight to monitor security logs in real-time by continuously importing logs into the SIEM.

Domo follows a strict termination procedure by removing access to Domo within 24 hours of termination.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Description of management access authentication
Domo supports - SAML single sign-on, and “just in time” provisioning of users when they authenticate successfully for the first time. For user organizations electing to use the native Domo account and passwords, passwords are stored using a salted SHA-512 hashing algorithm. Domo also offers the option of implementing an extra layer of security by supporting multi-factor authentication.
Domo access management requires 2 factor authentication, federated identity or username/password. Administration access utilises additional secuirty via a dedicated VPN.

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
BSI Assurance UK Limited
ISO/IEC 27001 accreditation date
Effective Date: 21/08/2021. Expiry Date: 21/08/2024
What the ISO/IEC 27001 doesn’t cover
The entire Domo platform supporting any customer is covered under our ISO 27001 certification.
ISO 28000:2007 certification
No
CSA STAR certification
Yes
CSA STAR accreditation date
1/1/2020 - and accredited annually
CSA STAR certification level
Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover
The entire Domo platform is evaluated annually against CSA Star standards.
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • ISO 27018
  • ISO 27001
  • SOC 1 Type II
  • SOC 2 Type II
  • HITRUST CSF
  • HIPPA

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
Other security governance standards
- ISO 27018;
- GDPR;
- US Privacy Shield;
- SOC 1 Type II;
- SOC 2 Type II HITRUST
Information security policies and processes
Domo's Security Steering Committee is comprised of cross-organizational representatives. They meet regularly to discuss issues related to security policies and other topics. Evidence is provided to our external audit team as part of our SOC II attestation, available upon request.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Domo has a defined change management ticketing process utilizing Jira and ServiceNow. Changes require authorizations from both Domo’s Engineering Director and Chief Product Officer. Support notifies and updates clients accordingly when maintenance of Domo is required.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Code scanning is done every build, ad-hoc. Planned feature testing is performed We do our own internal security testing with different intervals per type of analysis activity. Code scanning is done every build, ad-hoc. Planned feature testing is performed every sprint and regular application scanning is performed monthly. Additionally, internal penetration testing is performed and we contract with an independent third party for external penetration tests every six months.

Dynamic, Static, and interactive tools are used, and tools include Blackduck, BURP Suite Professional, Sonar, Checkmarks, Actionetix, and others.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
We utilize our Siem (Splunk) to store and monitor for specific security events/incidents of interest. Incidents are created using define rulesets that we create to trigger on one or more actionable events of interest that warrant further investigation and response. Incidents take into account scope and impact to determine severities and are categorized accordingly. Incidents thresholds are established on a per-incident basis.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Domo's incident response methodology includes the following phases: Preparation, Identification, Containment, Eradications, Recovery, and Follow-up. An assessment is performed and updated during the incident to document and understand the extent and resolutions of an incident. Affected customers will be notified within 24 hours via the customer's preferred method.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Covid-19 recovery

Covid-19 recovery

Domo has supported numerous government agencies in their response against covid including the UK and US governments. We continue to invest in growing Domo's business in the UK with headcount in Sales, Marketing, Consulting and Technical roles. We adhere to government regulations and guidance on the safety of our people and the way that we can assist the community recover from the pandemic. In our return to work Domo has Implemented the 5 foundational principles of the Good Work Plan and is supporting community integration, such as volunteering initiatives related to COVID-19 through Domo's staff volunteering days.
Tackling economic inequality

Tackling economic inequality

Domo is investing in tackling economic inequality through a number of programs. We work with SMEs within the UK as part of our supplier base, have increased our contract workforce into full-time emplyment. Our training investments allow development of skills within our workforce that includes interns, graduates and senior staff. Oue Domo staff days enable our UK team to contribute to their communities with paid for time volunteering in the community, and many have undertaken work around skills development within the community to tacle economic inequality. While maintaining high standards of hiring, Domo has proactively changed our job requirements to reduce the mandatory need for university degrees to increase access to non-traditional pathways and experience unless a degree is absolutely required. We have instructed hiring staff and service providers to actively consider candidates from non-traditional pathways with the aim of meaningfully contributing to tackling economic inequality through our own hiring practices.

Domo supporting your contract workforce with career development through every manager being mandated to have a personal development discussion and plan with every team member to grow the careers of team members, and this has resulted in over 10% of our staff being promoted and changed roles according to their development goals in the past 12 months.
Equal opportunity

Equal opportunity

Domo has invested in partnering and sponsoring a number of initiatives to battle inequality. Examples include our involvement in casuses related to the specific challenges faced by individuals and groups in participating in the data and analytics space due to gender, sexual orientation and ethnic background. We continue to support causes, and internally have local and company wide Employee Resource Groups such as Women at Domo. We have run company wide training on topics around race such as Juneteenth in the USA. Our parental benefits have been featured in media such as our fertility and maternity benefits and have flexible working conditions to ensure that parents returning to work are able to engage in the workforce.
Wellbeing

Wellbeing

Domo invests in our people and supports their wellbeing through access to wellness programs including local wellness challenges, navati and local fitness clubs that uses Domo's own product to share and gamify fitness activities. Within the community we monitor our impact on our community and assist in delivering exceptional products that clients have shared reduced their anxiety through being made proactively aware on data and certain of what they are basing decisions on. We aim to make solutions that are mobile capabile to allow people to engage with their local community while fulfilling their obligations for decisions with impact. As a business Domo runs a company wide employee survey twice per year with response rates above 90% that benchmarks Domo to other organisations within our sector across more than 30 question. Recent scores have seen Domo above industry benchmarks on 90% of questions asked covering leadership, value, learning, wellbeing, compensation and development. We offer private health insurance as standard benefit for staff, as well as a fully staff anonymous mental health help line to accomodate staff struggling with any issues they are not comfortable disclosing to their manager or our employee liaisons within the Domo offices.

Pricing

Price
£113 to £1,600 a user a year
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
30 Day Free Trial. Full Access to Enterprise Product.
Link to free trial
Www.domo.com/start/free

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mark.green@domo.com. Tell them what format you need. It will help if you say what assistive technology you use.