#GDPR Compliance - Data Minimization via ArchivePod
- 2. 2 The ArchivePod was made for the rigors of GDPR and provides customers with a GDPR-ready solution that gets clients toward compliance far quicker than if they were to go it alone. No need to create and implement expensive and time-consuming processes. No need to implement expensive infrastructure. With GDPR in effect as of May 25th, 2018, companies are facing increasing pressure to meet the requirements. However, with the ArchivePod, customers can be confident that they will have a GDPR compliant solution for their archived data the moment they turn it on. The following chart reveals some of the features that make ArchivePod compliant with key Areas in GDPR. TAKE THE LEAP TO GDPR COMPLIANCY GDPR Ready Solution ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. ArchivePod Features ArchivePod Impacts On GDPR Key Areas Transparency – Every action (data entry, decision, uploaded artifact, development, testing, and production execution activities, etc.) for each project is viewable and auditable via self- service audit links. All deployment of ongoing archiving and purge activities are also documented. Art. 30 - Records of processing activities – Provides data controller a clear and auditable record of processing activities including purpose, who executed it, applicable data retention policies, etc., when it comes to the management of archive data or data that is defensibly purged for both live and retired applications. Ability to perform data purge against any structured data application Art. 17 - Right To Be Forgotten – Deploy a complete data purge solution across an application ecosystem to thoroughly and quickly delete the data subject’s data from affected systems and provide documented confirmation. Art. 5 - Data Minimization – Ensure data is only kept that corporations are legally required to keep via compliance with corporate data retention policies. Full Transparency of all project activities, Automated Workflows, Encryption at rest, Data Security and User Access Mgmt requirements gathering and implementation, Multi-Certified platform, Multi-level review and approval process, Mapping of corporate data retention policies, etc. Art. 25 - Privacy by Design – ArchivePod provides the Data controller an ‘appropriate technical and organizational measures in an effective way…to protect the rights of data subjects.’ Enterprise centralized archive repository that is immutable, available and accessible - 24/7 via standard access methods and reports. Art. 20 - Data Portability – Due to centralization of all archive data in the ArchivePod, it is much easier for companies to provide fulfill the right for a data subject to receive the personal data concerning them in a commonly used and machine readable format to transmit to another controller. Art. 15 - Right to Access – Greatly facilitates to data subjects the confirmation as to where of not personal data is being processed, where, and for what purpose.
- 3. GDPR-Ready Solutions – Deeper Dive ArchivePod Tackles The Most Challenging Mandates The ArchivePod embodies both ILM (Information Lifecycle Management) and Data Governance disciplines that ensure a complete 360 degree approach to managing and protecting data throughout its lifecycle. Because of this, the ArchivePod is one of the few products that can truly address to key GDPR mandates below. GDPR Subject Applied ILM / Data Governance Disciplines What ArchivePod Delivers… Data Subject Rights Data Lineage Data Purge Audit/Compliance Data Quality •Provide a fully transparent and automated process that is efficient, scalable, cost-effective and auditable. •Can deliver an automated, integrated solution that allows for deletion of PHI/PII data across multiple affected systems to ensure consistent and safe removal and provides audit reports of each execution. •Leverage Data Quality to determine what PHI/PII data needs to be corrected or marked for deletion. •Centralized GDPR compliance dashboard reporting to quickly provide feedback look on what customer data was deleted and when. Data Minimization Data Lineage Data Purge Audit/Compliance RIM Code Management and Mapping •Centralize and map corporate/application retention policies to each application. •Provide a fully transparent and automated process that is efficient, scalable, cost-effective and auditable. •Implement automated solution to ensure affected systems adhere to existing retention policies and is auditable. •Centralized GDPR compliance dashboard to display an application’s compliance with corporate data retention policies. ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement.
- 4. 4WHAT IS IT? The ArchivePod is a hyperconverged appliance that provides self-service data archive capabilities to safely and securely retire applications. Delivers a true private archive cloud solution to your enterprise data center – keeping your data safe within your data center walls. Reduces your storage, network, and server footprint – all environments like dev, test, production, and DR all ALL included in the appliance. Ensures ONE place, ONE process, and ONE team solution for your archived data. Delivers the lowest cost archiving TCO solution. ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. Why a hyperconverged appliance? Dramatically reduces eDiscovery costs for your archived data. Replaces your legacy, inflexible infrastructure with a hyperconverged appliance that intelligently integrates storage, network, and servers into a single 2u chassis. As a result, the ArchivePod delivers an enterprise cloud platform directly to your data center. Some advantages of this solution are: Rapid deployment: delivers ‘plug and play’ archive solution – rack it, connect it, and power it up – you’re all set.
- 5. 5 Everything you need to safely archive data from retired systems is contained in the ArchivePod appliance. The Data Governance Director (DGD) Virtual Machine (VM) handles all the project management activities and artifact storage. The ArchivePod leverages Informatica’s best-of-breed ILM product to safely archive the data. The ILM Data Archive VM handles the archive and purging of data from the source application. The ILM Data Vault (VM) stores the data in the highly compressed and secure data vault. Reporting, Search, Audit, Connectivity, Retention, and Data Catalog (DataTags) capabilities provide governance over your archived data. KEY COMPONENTS IN THE ARCHIVEPOD Enterprise Cloud Delivered + Informatica ILM = GDPR Ready ©2017 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. Project Related Artifacts Decisions Requirements Statistics Audit History Dashboards/Metrics Production Data Stores (structured/unstructured) Multiple OS/DB platforms Live / Retired Applications (Source ) ArchivePod (Target) Extract Data from Source System Project Activites/Artifacts managed in DGD DGD VM ILM Data Archive VM ILM Data Vault VM Mask/Encrypt Archive Records to IDV Export Retain Search Data Tag Discover Connect Governance with ArchivePod Users Compressed Data Files
- 6. 6 The ArchivePod’s DGD delivers 5 automated Factory Workflows in total to expand your program beyond application retirement. With these workflows, you can start your journey right away and have audit and compliancy built in from day one and be ready for the rigors of tougher data privacy mandates like GDPR. You can choose one worklfow or execute all five in parallel. The decision is yours. MANAGE YOUR DATA LIKE A CRITICAL ASSET Be prepared for GDPR. Start your data governance program now.. ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. Purge Execution RIM/Data Purge – Keep live systems compliant, reduce exposure, and improve performance by purging data the exceeds corporate data retention policies. Critical for GDPR – Article 17 - ‘right to be forgotten’ compliance. Purge Confirmation Live Structured and Unstructured Data Applications / Data Stores Word Excel PDF Retired Oracle ERP App Retirement Archiving – Retire applications and archive their data. Retirement Confirmation, Transactional + Reference Data Retired Structured and Unstructured Data Applications / Data Stores Retirement Confirmation App Retirement No Archiving – Retire applications without retaining their data Word Excel PDF Retired Unstructured Data Retired Structured and Unstructured Data Applications / Data Stores Word Excel PDF Live Structured and Unstructured Data Applications / Data Stores Transactional Data Perf Archive – Improve application performance and greatly reduce storage costs by archiving transactional data that no longer supports daily operations but is still useful for reference purposes. Word Excel PDF Transactional + Reference Data Live Structured and Unstructured Data Applications / Data Stores Data Retirement – Improve application performance and greatly reduce storage costs by fully retiring/archiving the complete set of data (ref + transactional) to a repository to purely support audit/legal ediscovery needs.
- 7. 7 Dashboards Provides dashboards for managing at an executive, program and project level. Self-Serve Audit All pages have ‘audit links’ allowing an auditor to perform an audit anytime without the need of project resources to gather data. Centralized All project tasks, decisions, attachments, requirements, etc. are all kept in application. Policystore Store all application and corporate data retention policies for requirements mapping . Automated WF Data Archive/Purge/Application Retirement processes automated The Data Governance Director (DGD) is utilized as the archive project managment tool, allowing you to execute multple archive efforts in parallel with fewer resources. All requirements, attachments, decisions, etc., will be captured in the tool and can be auditable at any time. ArchivePod Project Management EfficiencyDeliver a GDPR solution with Velocity Transparent Provides 100% transparency on ALL activities within the application, even admin activities. Secure Provides both authentication (including LDAP) and RBAC security. Auto PM Enter your estimated critical dates and DGD will automatically track actuals and status against it. Approval Mgmt Provides the ability to create external roles for artifact reviews and critical project decisions. AutoTask Assign The application automatically assigns tasks based on role ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement.
- 8. 8 Each ArchivePod delivers more than an appliance – it delivers a complete self-service solution. Everything you need to efficiently drive a data minimization project is included via the Data Governance Director(DGD) VM – an application that drives the project from building your project team to disposing or archiving the data. Additionally DGD manages the final disposition of the retired application’s hardware and software components so you can accurately track and capture each app retirement’s ROI. Project Mgmt, Automated Workflows, Audit/Compliance Included… ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement.
- 9. 9Software – What you get with ArchivePod More than just software, a complete solution ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. Each ArchivePod includes the following: Data Governance Director Project Management Platform – Includes automated workflows for App Retirement and Data Retirement Informatica Data Archive Secure Edition Support to either 50TB or 100TB tiers of source application data Unlimited DSG Relational Adapters – Database adapters to provide connectivity to supported database types including Oracle, SQLServer, Informix, DB2 z/OS, IMS, IDMS, Sybase, etc. Informatica Discovery Option SAP-specific and other ERP-specific application retirement and archive accelerators Three fully configured ILM archive environments: ILM Dev, ILM UAT, and ILM Prod DR to AWS, Google, Azure, or existing on prem DR solution Unlimited named users Informatica Data Archive Validation Bundle
- 10. 10Licensing – Multiple Options Multiple options to fit your budget ©2018 DGD Systems, Inc., Intellectual Property. All Rights Reserved. Not for use of disclosure outside of DGD Systems, Inc., except under written agreement. The ArchivePod offers both traditional Perpetual and Subscription plans to fit every IT budget. Please enquire for more details. The following models are supported: Full Managed Services Model ArchivePod + Implementation Services Model Resell Model