White Paper
GoodData.CN Security Whitepaper
The GoodData.CN Security Whitepaper details robust measures for protecting data in self-managed deployments. It describes defense-in-depth practices including encryption in transit and at rest, centralized authentication with OAuth support, strict access controls, and multi-tenant isolation. The platform aligns with ISO 27001, SOC 2, HIPAA, GDPR, and CCPA standards. Security practices cover secure development, vulnerability management, AI governance, and continuous monitoring. AI features use external models but never send raw data out. Annual penetration tests, role-based permissions, and detailed audit trails ensure compliance and transparency across all operations.