31:T9b0,**Table of Contents** * [Privacy & Personal Information](https://observablehq.com/d/a0e5409506dc2f44#cell-106) * [What personal data do you collect from users?](https://observablehq.com/d/a0e5409506dc2f44#cell-108) * [Are you GDPR or CCPA compliant?](https://observablehq.com/d/a0e5409506dc2f44#cell-254) * [Authentication](https://observablehq.com/d/a0e5409506dc2f44#cell-5) * [Do you enforce multi-factor authentication?](https://observablehq.com/d/a0e5409506dc2f44#cell-51) * [Do you support SSO/SAML?](https://observablehq.com/d/a0e5409506dc2f44#cell-116) * [Network Security](https://observablehq.com/d/a0e5409506dc2f44#cell-7) * [Is all the network traffic handled through HTTPS?](https://observablehq.com/d/a0e5409506dc2f44#cell-53) * [How do you gather and analyze information regarding new and existing threats and vulnerabilities, actual attacks, and the effectiveness of the existing security controls?](https://observablehq.com/d/a0e5409506dc2f44#cell-588) * [Data Security](https://observablehq.com/d/a0e5409506dc2f44#cell-32) * [How do you protect user data?](https://observablehq.com/d/a0e5409506dc2f44#cell-58) * [Are stored secrets, data connectors, and cloud file attachments secure?](https://observablehq.com/d/a0e5409506dc2f44#cell-635) * [Does your application enable granular permissions and roles to be created?](https://observablehq.com/d/a0e5409506dc2f44#cell-243) * [Do you offer an On-Prem solution?](https://observablehq.com/d/a0e5409506dc2f44#cell-272) * [Do you use any sub-processors for data processing purposes?](https://observablehq.com/d/a0e5409506dc2f44#cell-120) * [Operational Security](https://observablehq.com/d/a0e5409506dc2f44#cell-44) * [Do you conduct background checks on employees?](https://observablehq.com/d/a0e5409506dc2f44#cell-81) * [Do all employees have access to user data?](https://observablehq.com/d/a0e5409506dc2f44#cell-83) * [Describe your security awareness program for personnel](https://observablehq.com/d/a0e5409506dc2f44#cell-88) * [Security Assessments and Compliance](https://observablehq.com/d/a0e5409506dc2f44#cell-9) * [Do you scan for security vulnerabilities?](https://observablehq.com/d/a0e5409506dc2f44#cell-55) * [Are system event and audit logs retained online and offline?](https://observablehq.com/d/a0e5409506dc2f44#cell-608) * [Do you conduct external (third-party) audits of the service? Are you SOC2 certified?](https://observablehq.com/d/a0e5409506dc2f44#cell-68)32:T4c0,${question("How do you protect user data?")} Observable protects user data by minimizing our data collection requirements and allowing users discretion over how to load data into notebooks. When users access data from external data sources, it never touches our servers. It [flows](https://observablehq.com/@observablehq/security-model) from the data source to the user's browser.

System Architecture Diagram for Enterprise.

Please refer to [this overview](https://observablehq.com/@observablehq/security-model) for more information about how our notebook architecture protect our users' data, as well as [this summary](https://observablehq.com/@observablehq/enterprise-pro-team-onboarding-securely-connecting-to-data?collection=@observablehq/enterprise-training-curriculum) about the options for connecting to data. Also refer to the discussion above on privacy and personal information that we collect from users.33:[{"id":"f6e7c6fc1629b9f11f34b0677d655a522c782fa0cc595c16f641ebc46354c8ca642e53268d48751cd6c997d724d062a02e9621cbc0fe263f0d330790081438b5","href":"https://static.observableusercontent.com/files/f6e7c6fc1629b9f11f34b0677d655a522c782fa0cc595c16f641ebc46354c8ca642e53268d48751cd6c997d724d062a02e9621cbc0fe263f0d330790081438b5","name":"System Architecture Diagram for Enterprise.png","type":"image/png","lastModified":1678929556347.336,"size":128538}] 2f:{"title":"Security and Privacy FAQs","cells":[{"id":0,"value":"# Security and Privacy FAQs","pinned":false,"hidden":false,"mode":"md"},{"id":359,"value":"**Note:** This is legacy content that may not include the latest information about Observable's security and privacy features. To get the most up-to-date information about our approach to privacy and security, please visit our [documentation](https://observablehq.com/documentation). ","pinned":false,"hidden":false,"mode":"md"},{"id":308,"value":"deck(\"security\")","pinned":false,"hidden":false,"mode":"ojs"},{"id":288,"value":"This notebook is a collection of questions that are frequently raised during security review processes with organizations. Please reach out to us at [sales@observablehq.com](mailto:sales@observablehq.com) if you need assistance completing internal security questionnaires or to request a security review process.","pinned":false,"hidden":false,"mode":"md"},{"id":158,"value":"$31","pinned":false,"hidden":false,"mode":"md"},{"id":106,"value":"---\n## Privacy & Personal Information","pinned":false,"hidden":false,"mode":"md"},{"id":108,"value":"$${question(\"What personal data do you collect from users?\")}\n\n\nWe collect your information only with your consent in accordance with our [Terms of Service](https://observablehq.com/@observablehq/terms-of-service). We only collect personal information that is necessary to fulfill the purpose of your interaction with us. Please see our [Privacy Policy](https://observablehq.com/@observablehq/privacy-policy) for more details about what personal data we collect from users.","pinned":false,"hidden":false,"mode":"md"},{"id":254,"value":"$${question(\"Are you GDPR or CCPA compliant?\")}\n\nWe're in the process of getting GDPR and CCPA certified.","pinned":false,"hidden":false,"mode":"md"},{"id":5,"value":"--- \n## Authentication","pinned":false,"hidden":false,"mode":"md"},{"id":51,"value":"$${question(\"Do you enforce multi-factor authentication?\")}\nObservable uses 3rd party authentication providers (Microsoft, GitHub, Google or Twitter) as well as email login through a one-time-password. Users may have multi-factor authentication configured with their authentication providers.","pinned":false,"hidden":false,"mode":"md"},{"id":116,"value":"$${question(\" Do you support SSO/SAML?\")}\nWe support [OpenID Connect](https://openid.net/connect/) with Microsoft and Google. OpenID Connect is a simple identity layer on top of OAuth 2.0. Custom SSO is available for Observable Enterprise customers ([learn more](https://observablehq.com/pricing)). The SAML protocol is not supported at this time.","pinned":false,"hidden":false,"mode":"md"},{"id":7,"value":"---\n## Network Security","pinned":false,"hidden":false,"mode":"md"},{"id":53,"value":"$${question(\"Is all the network traffic handled through HTTPS?\")}\nObservable is only accessible over HTTPS and only encrypted HTTPS and websockets (WSS) are used for data transmission. Our commercial certificate is signed by Cloudflare, and we only allow TLS 1.2 and higher for HTTPS connections.","pinned":false,"hidden":false,"mode":"md"},{"id":341,"value":"$${question(\"How do you gather and analyze information regarding new and existing threats and vulnerabilities, actual attacks, and the effectiveness of the existing security controls?\")}\n\nOur production infrastructure is hosted by Heroku, and is contained within Heroku’s secure network. Heroku regularly undergoes penetration tests and vulnerability assessments to ensure that the network remains secure. See: https://www.heroku.com/policy/security. We also rely on GitHub Enterprise’s advanced vulnerability scanning and security alerts. They monitor our codebase and dependencies for vulnerabilities, and issue automated alerts when problems are found. See: https://github.com/features/security.","pinned":false,"hidden":false,"mode":"md"},{"id":32,"value":"---\n## Data Security","pinned":false,"hidden":false,"mode":"md"},{"id":58,"value":"$32","pinned":false,"hidden":false,"mode":"md"},{"id":337,"value":"$${question(\"Are stored secrets, data connectors, and cloud file attachments secure?\")} \n\nAll user data, including stored secrets, data connectors, and authentication tokens for Cloud File Attachments, are encrypted at rest and entirely stored on our production systems. Our database is hosted by Heroku, and once an authentication token is set up into Observable, it cannot be re-downloaded or exported. Authentication tokens can be deleted at any time.\n\nData accessed from a user's cloud files or databases are not stored on the Observable platform. Only access tokens required to authenticate with the sources are stored, encrypted, on Observable's servers. If the database is not accessible through the public internet, it can be accessed by installing a self-hosted database proxy on the same private network in which case data would flow from the source, through that proxy and to the browser without ever leaving the network.","pinned":false,"hidden":false,"mode":"md"},{"id":243,"value":"$${question(\"Does your application enable granular permissions and roles to be created?\")}\nIn Observable Pro workspaces, owners can [assign roles](https://observablehq.com/@observablehq/permissions-for-teams-notebooks#cell-337) of 'owner', 'editor', or 'viewer' to team members. At the notebook level, team members can then control who within the team can view and edit the notebooks. They can also share the notebook with the whole team as viewers or editors.\n\nOur [Enterprise](https://observablehq.com/@observablehq/introducing-observable-for-enterprise) tier provides additional security and access control. Enterprise workspace owners can [configure](https://observablehq.com/@observablehq/getting-started-with-teams#enterpriseFeatures) limitations on who in the team can publish content and can require all team members to be authenticated against their domain(s), which protects their workspaces when members leave their organizations.","pinned":false,"hidden":false,"mode":"md"},{"id":272,"value":"$${question(\"Do you offer an On-Prem solution?\")} \nObservable does not offer an On-Prem solution. However, it is still possible to securely connect to data that cannot leave your private network, by installing a database proxy on your network. In this configuration, data travels from the source, through the proxy, and to the user's browser without ever having to leave the network.\n\nWe provide an [open source](https://github.com/observablehq/database-proxy) Node.js database proxy for self-hosting. You can learn more about installing and using this proxy in [this notebook](https://observablehq.com/@observablehq/self-hosted-database-proxies).","pinned":false,"hidden":false,"mode":"md"},{"id":120,"value":"$${question(\"Do you use any sub-processors for data processing purposes?\")} \nNo.","pinned":false,"hidden":false,"mode":"md"},{"id":44,"value":"---\n## Operational Security","pinned":false,"hidden":false,"mode":"md"},{"id":81,"value":"$${question(\"Do you conduct background checks on employees?\")}\nWe reserve the right to run background checks on our employees and contractors, but we do not currently do so as a matter of course.","pinned":false,"hidden":false,"mode":"md"},{"id":83,"value":"$${question(\"Do all employees have access to user data?\")} \nNo. It is our company policy to respect the principle of least privilege when designing access controls and administrative tools. For example: all employees have access to notebook metadata, but only support personnel have access to the content of the notebooks.\nIn addition, all personnel are required to sign Confidentiality Agreements to protect customer information.","pinned":false,"hidden":false,"mode":"md"},{"id":88,"value":"$${question(\"Describe your security awareness program for personnel\")}\nOur employees are currently required to train on our company policies, which include:\n- Work Computer Policy: to properly secure employee endpoints\n- Secure Software Development Process: how we design, build and deploy our software with security taken into consideration at every level\n- Security Incident Management Process: steps and procedures in the even of an incident","pinned":false,"hidden":false,"mode":"md"},{"id":9,"value":"---\n## Security Assessments and Compliance","pinned":false,"hidden":false,"mode":"md"},{"id":55,"value":"$${question(\"Do you scan for security vulnerabilities?\")}\nOur production infrastructure is hosted by Heroku, and is contained within Heroku’s secure network. Heroku regularly undergoes penetration tests and vulnerability assessments to ensure that the network remains secure. See: https://www.heroku.com/policy/security.\n\nOur software development process involves code vulnerability reviews by our developers in addition to resolution of issues flagged via automated vulnerability scanning. We monitor our codebase and dependencies for vulnerabilities using GitHub Enterprise’s advanced vulnerability scanning and are issued automated alerts when problems are found. See: https://github.com/features/security\n","pinned":false,"hidden":false,"mode":"md"},{"id":327,"value":"$${question(\"Are system event and audit logs retained online and offline?\")} \n\nWe maintain Heroku audit logs and Datadog system event logs.","pinned":false,"hidden":false,"mode":"md"},{"id":68,"value":"$${question(\"Do you conduct external (third-party) audits of the service? Are you SOC2 certified?\")} \nNot yet. ","pinned":false,"hidden":false,"mode":"md"},{"id":46,"value":"---","pinned":false,"hidden":false,"mode":"md"},{"id":169,"value":"question = (text) => htl.html`Q:

${text}

`","pinned":false,"hidden":false,"mode":"ojs"},{"id":298,"value":"import {download, deck, welcomeBox} from \"498a95c2be454a4a\"","pinned":false,"hidden":false,"mode":"ojs"},{"id":325,"value":"import {free, pro, enterprise} from \"@observablehq/pro-tag\"","pinned":false,"hidden":false,"mode":"ojs"}],"files":"$W33","stdlib":"1","titling":"auto"}