Security & Compliance

Secure by design

Data security that is tailored to fit your business.

Request a demo Live demo + Q&A

Try it now 30-day trial

Security

Product security

We apply DevSecOps, building secure design, reviews, SAST, and DAST into our development lifecycle. Data is encrypted at rest and in transit, and our customers can employ strong multitenancy controls.

Cloud security

Highly resilient data centers with N+1 redundancy and a wide range of audits and certifications, including SOC 2 and ISO 27001. 24x7x365 managed physical security and robust access controls.

Operational security

Robust security logging and monitoring 24x7x365, strict production access control, and logs review. Regular vulnerability scans and patch management with defined SLAs. Security reviews and penetration tests.

Whitepapers

GoodData Security Whitepaper: Security Measures of GoodData Cloud

Learn more

SLAs & Trust

Availability & SLA commitments

Enterprise customers benefit from 99,5 % SLA and 24x7 support. We monitor our platform for availability 24x7x365 and have on-duty personnel ready to resolve any potential issues or incidents.
Refer to our Support Portal for up-to-date platform status.

Resiliency

We apply HA architecture, and the platform is deployed across multiple availability zones. Our business continuity plan follows ISO 22301 and incorporates daily off-site backups and annual disaster recovery tests.

Privacy

Privacy practices

We are committed to security and privacy, follow best practices for data protection, and offer emerging geographical zone selection to ensure that customer data residency requirements are met.
We comply with privacy laws, including GDPR and CCPA.
Refer to our Legal center and Privacy Policy for additional information.

Compliance

SOC 2 Type II report

GoodData is SOC 2 Type II certified since 2013 and is regularly audited by a reputable third-party auditing company on Security, Availability, and Confidentiality principles.

ISO 27001 compliance

We comply with ISO 27002 code of practices and have implemented all ISO 27001 Annex A controls. The SOC 2 report includes mapping of our controls to ISO 27001.

HIPAA compliance

We comply with U.S. HIPAA law for the protection of health data and will sign BAA with our customers. Our SOC report includes mapping of our controls against HIPAA requirements.

Product accessibility

WCAG 2.1 AA
Compliance

Enhancing accessibility for users with visual, auditory, motor, and cognitive impairments.

EN 301 549
Compliance

Meeting EU standards under the European Accessibility Act (EAA).

PDF/UA
Compliance

Ensuring accessible PDF exports for an inclusive reporting experience.

Section 508
Compliance

Ensuring accessible analytics for an inclusive experience across government and enterprise users.

Accessible analytics by design

Accessibility at GoodData is a core design and product principle — not a compliance checkbox. We believe everyone should be able to access, understand, and act on data without barriers. That commitment shapes everything from navigation and visual clarity to screen reader support and accessible documentation.

Our goal is to deliver analytics that are inclusive by default and enterprise-ready — empowering customers to meet regulatory requirements, expand into new markets, and provide better experiences for every user.