Page tree

Skip to end of metadata
Go to start of metadata

Like most cloud providers, ClearDATA operates under a shared responsibility model. While Azure takes responsibility for the security of its infrastructure, responsibility for maintaining compliance within your Azure environment is a collaborative effort between ClearDATA and our customers. 

Listed below are Azure products and their associated reference guides for creating and maintaining compliance within Azure. Each guide provides recommendations and steps to rectify security vulnerabilities and compliance risks within your Azure environment. Responsibility assignment matrices per product are also provided which can help you better understand ClearDATA's role and responsibilities as well as your own.

If you are interested in enabling or configuring any of the Azure BAA Covered services listed below which are not covered by our automated safeguards, please create a support request through the portal detailing your request.

Additionally, if there is a particular Azure product reference guide that isn’t listed below, please get in touch with us and we will add it to the list.


Services

Compute
Azure Virtual Machines BAA COVERED AUTOMATED SAFEGUARDS
Azure Backup BAA COVERED
Azure App Service BAA COVERED AUTOMATED SAFEGUARDS
Azure Functions BAA COVERED AUTOMATED SAFEGUARDS
Azure Containers  BAA COVERED
Batch Accounts BAA COVERED
Azure Virtual Machine Scale Sets  BAA COVERED
Service Fabric  BAA COVERED
Networking
Azure App Gateway BAA COVERED AUTOMATED SAFEGUARDS
Azure Load Balancers BAA COVERED
Azure DNS BAA COVERED
Network Watcher BAA COVERED
Traffic Manager BAA COVERED
Virtual Network Gateway BAA COVERED
ExpressRoute BAA COVERED
DDOS Protection BAA COVERED
Azure Network Security Group BAA COVERED AUTOMATED SAFEGUARDS
Azure Virtual Network BAA COVERED AUTOMATED SAFEGUARDS
AI & ML
Cognitive Services: Speech Services BAA COVERED
Cognitive Services: Text Analytics BAA COVERED
Microsoft Genomics BAA COVERED
Azure Machine Learning Service BAA COVERED AUTOMATED SAFEGUARDS
Internet of Things
Azure Event Hubs BAA COVERED AUTOMATED SAFEGUARDS
IOT Hub BAA COVERED
Identity
Azure Portal BAA COVERED
Active Directory (EA)  BAA COVERED
Azure Information Protection BAA COVERED
Storage
Azure Storage Account BAA COVERED AUTOMATED SAFEGUARDS
Azure Data Lake Storage Gen2 BAA COVERED AUTOMATED SAFEGUARDS
Azure Disk Storage BAA COVERED AUTOMATED SAFEGUARDS
Import / Export BAA COVERED
Databases
Azure SQL Database BAA COVERED AUTOMATED SAFEGUARDS
Azure Cosmos DB BAA COVERED AUTOMATED SAFEGUARDS
Azure PostgreSQL Database BAA COVERED
Azure Redis Cache BAA COVERED
Azure Data Factory Gen 2 BAA COVERED AUTOMATED SAFEGUARDS
Azure SQL Data Warehouse BAA COVERED AUTOMATED SAFEGUARDS
Azure Analysis Services BAA COVERED AUTOMATED SAFEGUARDS
DevOps
Application Insights BAA COVERED
Azure DevOps BAA COVERED
Azure Resource Manager BAA COVERED
Containers
Azure Kubernetes Service BAA COVERED
Azure Container Registry BAA COVERED AUTOMATED SAFEGUARDS
Security
Azure Key Vault BAA COVERED AUTOMATED SAFEGUARDS
Security Center BAA COVERED
Web
Azure Search BAA COVERED
Notification Hubs BAA COVERED
Data and Analytics
Azure Stream Analytics BAA COVERED
Azure Data Explorer BAA COVERED
Azure Databricks BAA COVERED AUTOMATED SAFEGUARDS
PowerBI Embedded BAA COVERED
HD Insight Clusters BAA COVERED
Data Lake Analytics BAA COVERED
Azure Log Analytics Workspace  BAA COVERED
Management and Governance
Azure Automation BAA COVERED
Security Center BAA COVERED
Azure Monitor BAA COVERED AUTOMATED SAFEGUARDS
Advisor BAA COVERED
Azure Site Recovery BAA COVERED
Azure Policy  BAA NON-COVERED
Integration
API Management BAA COVERED
Azure ServiceFabric BAA COVERED
Azure Event Grid BAA COVERED AUTOMATED SAFEGUARDS
Azure Data Catalog BAA COVERED
Azure API for FHIR BAA COVERED
Logic Apps BAA COVERED
Service Bus BAA COVERED
Across the board

Legend

Any Service not listed here as covered or non-covered can be considered unsupported and not eligible for use by our customers. Please contact ClearDATA Support to make a request that a service be Supported.

BAA COVERED = Eligible to transmit, process, and store PHI

BAA NON-COVERED = Not eligible to transmit, process, or store PHI

AUTOMATED SAFEGUARDS = Automatically remediates compliance controls described within the document

UNSUPPORTED =These services are not permitted to be used by our customers in any fashion. 


  • No labels