Security operations & responsibilities

This section covers operational security, risk management, and shared responsibility.

Sub-processors

Infotopics uses trusted sub-processors to deliver services securely.

Sub-processor	Purpose
Microsoft Azure	Hosting of segregated SaaS environments
TransIP	Infrastructure services
HubSpot	CRM and customer communications
Sentry	Application monitoring and error tracking

Sub-processors are reviewed regularly, and material changes are communicated to customers.

---

Vulnerability management

Infotopics follows a proactive vulnerability management approach:

• Continuous dependency monitoring

• OWASP Top 10 awareness

• Independent penetration testing

• Timely patching and remediation

Security updates are applied as part of normal operations for Share deployments.

---

Incident and data breach handling

In the event of a security incident:

• Impact is assessed immediately

• Customers are notified without undue delay

• Mitigation actions are applied

• Incidents are documented and reviewed

Incident response procedures align with ISO-aligned security practices.

---

Customer responsibilities

Customers are responsible for:

• Managing Tableau user access and permissions

• Applying workbook-level security

• Governing data content and sensitivity

• Securing infrastructure in Enterprise deployments

Infotopics cannot override Tableau’s permission model or customer infrastructure controls.

---

Best practices

We recommend following the additional data security guidelines provided by Tableau regarding Tableau Dashboard Extensions. These guidelines offer valuable insights and best practices to enhance the security posture of Tableau deployments while utilizing Extensions effectively. We offer support options to assist customers in resolving any data security concerns or technical issues. Whether utilizing on-premises solutions or SaaS deployments, customers can reach out to our support team to address their specific needs promptly.