Create pci-soc-hipaa.md (#14740)
Chris Akritidis committed
Mar 16, 2023 at 05:49 UTC
f9e25ac9734e53d22942384066acf52f3df902e4
1 file changed
+29
docs/cloud/pci-soc-hipaa.md
new
+29
@@ -0,0 +1,29 @@
1
+# PCI DSS, SOC 2 and HIPAA environments
2
+
3
+When running Netdata in environments requiring Payment Card Industry Data Security Standard (PCI DSS), Systems and Organization Controls (SOC 2),
4
+or Health Insurance Portability and Accountability Act (HIPAA) compliance, please keep in mind the following:
5
+
6
+## All collected data is always stored inside your infrastructure
7
+
8
+Even when you use Netdata Cloud, your data is never stored outside your infrastructure. Dashboard data you view and alert notifications do travel
9
+over Netdata Cloud, as they also travel over third party networks, to reach your web browser or the notification integrations you have configured,
10
+but Netdata Cloud does not store metric data. It only transforms them as they pass through it, aggregating them from multiple Agents and Parents,
11
+to appear as one data source on your browser.
12
+
13
+For more information see [Metric Retention - Database](https://github.com/netdata/netdata/blob/master/database/README.md) and
14
+[Data Netdata Cloud Stores and Processes](https://github.com/netdata/netdata/blob/master/docs/cloud/data-privacy.md#data-netdata-cloud-stores-and-processes).
15
+
16
+## Netdata Parents can be used as Web Application Firewalls (WAFs) for accessing your monitoring data
17
+
18
+The Netdata Agents you install on your production systems do not need direct access to the Internet. Even when you use Netdata Cloud, you can appoint
19
+one or more Netdata Parents to act as border gateways or application firewalls, isolating your production systems from the rest of the world. Netdata
20
+Parents receive metric data from Netdata Agents or other Netdata Parents on one side, and serve most queries using their own copy of the data to satisfy
21
+dashboard requests on the other side.
22
+
23
+For more information see [Streaming and replication](https://github.com/netdata/netdata/blob/master/docs/metrics-storage-management/enable-streaming.md).
24
+
25
+[Functions](https://github.com/netdata/netdata/blob/master/docs/cloud/netdata-functions.md) is currently the only feature that routes requests back to
26
+origin Netdata Agents via Netdata Parents. The feature allows Netdata Cloud to send a request to the Netdata Agent data collection plugin running at the
27
+edge, to provide additional information, such as the process tree of a server, or the long queries of a DB.
28
+
29
+<!-- You have full control over the available functions. For more information see “Controlling Access to Functions” and “Disabling Functions”. -->