Skip to content

What is PrivaceraCloud?

PrivaceraCloud is a Software-as-a-Service (SaaS) data access governance and enforcement management platform. It works with a wide range of datasources/applications, including AWS and Azure based datasources/applications. 

PrivaceraCloud manages and controls access to sensitive data. It enables:

  • Central definition and management of fine-grained access control policies across multiple cloud services
  • Data access audits
  • Compliance, audit, and governance reports
  • Encryption, decryption, and masking

Key Features#

  • Data Access Management based on ABAC (Attribute-Based Access Control) and RBAC (Role-Based Access Control) policies.

  • Resource-based (physical and logical metadata) data classification.

  • Tag-based data classification (business metadata).

  • Comprehensive normalized audits with rich event metadata detailing who, what, when, and where.

  • Reports and dashboards

Basic Concepts#

Restrictions to access are configured using data access policies which are comprised of rules. Rules specify which users and groups can access what data. 

A useful PrivaceraCloud account has three parts: Applications, data access users, and data access policies.

  1. Applications, which must be connected to PrivaceraCloud. Three different data access methods are for this connection: Data Access Server, PolicySync, and Plug-In.

  2. Data access users requiring access to the connected resources. These users can be defined individually within PrivaceraCloud using Access Manager: Users/Groups/Roles

    Users and Groups may also be imported from an a user directory service such as LDAP/AD or UserSync.

    You can also optionally import users, groups, and roles defined in your organization's Active Directory or LDAP server.  See Data Access User Synchronization with LDAP or Active Directory ("User Sync") for the user sync attachment process.

  3. Policies define the relationship between the data resources and the data access users. Policy rules are established and managed in Access Manager: Resource Policies and Access Manager: Tag Policies.

How PrivaceraCloud Works#

PrivaceraCloud works with and extends Apache Ranger to provide data access governance with centralized management of authorization policies and auditing. Policy enforcement points for access control run in your AWS or Azure environment. PrivaceraCloud policies are distributed to and synchronized with these policy enforcement points. These distributed enforcement points log all audit information back to your PrivaceraCloud account.

Last update: February 22, 2022