TIBCO Cloud Integration Security Framework

This white paper outlines the security framework of the TIBCO Cloud Integration platform, emphasizing the importance of security in its infrastructure. It details the security best practices employed by TIBCO and its infrastructure providers, including compliance with various standards such as SOC1 Type II, SOC 2 Type II, ISO/IEC 27001:2013, PCI/DSS, and HIPAA. The document explains how customer data is encrypted and logically separated to maintain security. It also describes the types of applications that can be created within the platform, including Connect Apps, Integrate Apps, Develop Apps, and Node.js Apps, each with specific deployment and security measures. Furthermore, the paper discusses the architecture of the TIBCO Cloud Integration platform, focusing on scalability, high availability, and the integration lifecycle management tools that facilitate the management of different phases of integration. The security management system and user access controls are also elaborated, ensuring that only authorized personnel can access sensitive information.