This whitepaper outlines the security practices and compliance measures implemented by Dataiku for its Cloud offerings, including the Private Cluster for Dataiku Cloud Enterprise add-on. It details the shared responsibility model between Dataiku, its customers, and cloud providers, emphasizing the importance of collaboration in achieving security and compliance. The document describes various security controls, including access security, data protection measures for data at rest and in transit, incident management, and business continuity planning. It also highlights Dataiku's certifications, such as ISO 27001 and SOC 1 and 2 Type II, which validate its commitment to maintaining high standards of security. Additionally, the whitepaper discusses the architecture of Dataiku Cloud services, including the use of dedicated environments for customers and encryption practices for data storage. The document serves as a comprehensive guide for understanding Dataiku's approach to security and risk management in its cloud services.