Overview
IBM® Netezza® Performance Server for IBM Cloud Pak® for Data as a Service ensures that your data is secured and protected by adhering to the following security and compliance standards.
Secure access control
Authentication
Both public and private NPSaaS endpoints are accessed through an HTTPS API. Where the API endpoint requires it, the user is authenticated for every HTTPS request that NPSaaS receives.
Encryption
When transmitted, content is encrypted on any public networks by using TLS 1.2 or later. For more information, see Data security and encryption.
At rest, content is encrypted within the Cloud Data Center in the following ways:
- On AWS, by using the 256-bit AES data encryption (industry standard).
- On Azure, by using the 256-bit AES data encryption that is compliant with FIPS 140-2.
Security compliance for Netezza
Netezza Performance Server as a Service (NPSaaS) follows industry‑recognized security and compliance standards to help protect customer data and support regulatory requirements. The service aligns with multiple frameworks including SOC 2, ISO 27001/27017/27018, and HIPAA—by implementing rigorous operational, administrative, technical, and organizational controls. These certifications and attestations help ensure that NPSaaS maintains a secure, trustworthy, and compliant environment for managing sensitive workloads.
The following table lists the compliance certifications that are supported for NPSaaS by region.
| Compliance | Global | US | Canada | EU & UK | India | Australia | Japan |
|---|---|---|---|---|---|---|---|
| SOC 2 |  |
||||||
| ISO 27K | |
||||||
| HIPAA | |
||||||
| GDPR | |
||||||
| DPDP | |
SOC 2 Type 2
IBM provides Service Organization Control (SOC) 2 Type 2 reports for its Netezza Performance Server as a Service (NPSaaS) managed services offering on both AWS and Azure platforms.
These reports evaluate IBM's operational controls against the criteria established by the American Institute of Certified Public Accountants (AICPA) Trust Services Principles. These principles define industry‑recognized standards for ensuring systems and controls are designed to protect customer data and maintain service integrity.
SOC 2 Type 2 compliance is available for Netezza Performance Server deployments on both AWS and Azure, demonstrating IBM's commitment to maintaining rigorous security controls across cloud platforms.
ISO 27017, ISO 27018
NPSaaS conforms to the security controls and technical and organizational measures (TOMs) that are defined in the following documents:
For more information, see the IBM Compliance Support page.
HIPAA
NPSaaS implemented the necessary controls commensurate with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security and Privacy Rule requirements. The controls include appropriate administrative, physical, and technical safeguards that are required of business associates in 45 CFR Part 160 and Subparts A and C of Part 164.