REDWOOD CITY, Calif, – June 14, 2021 – Instaclustr, delivering reliability at scale through its fully managed platform for open source data technologies, today announced it has achieved PCI-DSS certification for its Managed Elasticsearch service running on AWS. Managed Elasticsearch is based on the Open Distro for Elasticsearch, which will soon be updated to OpenSearch. Using the open source distribution ensures that Instaclustr customers always have control and portability of their data, are not subject to vendor lock-in, and are free from licensing costs. Instaclustr’s Managed Apache Cassandra and Managed Apache Kafka solutions on AWS have also earned re-certification.

This PCI-DSS certification for Managed Elasticsearch adds to Instaclustr’s existing PCI-DSS and SOC 2 accreditations, which demonstrate the company’s commitment to thorough data security practices and architecture. Enterprise customers with the most stringent security requirements can utilize Instaclustr’s advanced managed open source data solutions knowing that their environment is continually aligned with the most rigorous security protocols. 

The PCI-DSS (Payment Card Industry Data Security Standard) is the payment card industry’s mandated information security standard and applies to all organizations that store, process, and/or transmit cardholder data. PCI-DSS certification requirements dictate that all system components either within the cardholder data environment or with access to it must feature specific and strict technical, physical, and operational security controls. Beyond applications directly involving finance and payment card transactions, PCI-DSS controls are currently seeing increased adoption across other industries, as the recognized “gold standard” for security practices.

“We remain proactive in ensuring the data technologies we deliver for enterprise customers are always held to the highest security standards,” said Ben Slater, Chief Product Officer, Instaclustr. “Instaclustr-managed Elasticsearch now joins our Cassandra and Kafka solutions in achieving PCI-DSS certification. Also, in addition to meeting PCI-DSS compliance for customers who require it, new security enhancements we’ve implemented will result in improved levels of security for all of our managed service customers, regardless of product or platform they are leveraging.”

With the re-certification of Managed Cassandra and Managed Kafka, the following enhancements have also been made:

• Private Network Clusters are now optional.
• Console SSO is supported
• Requirements for cardholder data encryption have been revised to now only require encryption of the Primary Account Number (PAN). This is significant for Elasticsearch, as it allows additional flexibility for customers; for example, to search by customer name in Kibana.

Additionally, when looking at Kibana specifically, Instaclustr supports connecting customers’ Instaclustr-provisioned Kibana instance to an Open Identity Connect (OIDC) SSO provider, which provides an enhanced user experience.

Customers requiring full PCI-DSS compliance can opt-in when creating an Elasticsearch cluster on the Instaclustr managed platform to enable the required security options (for example, password complexity in the Instaclustr console). There are additional customer responsibilities involved to achieve full compliance. For more detailed information, please see the Instaclustr support page.

Instaclustr customers with existing clusters who are interested in adhering to PCI-DSS compliance should contact [email protected]. For further information or a technical briefing, contact an Instaclustr Customer Success representative or [email protected].

About Instaclustr 

Instaclustr delivers reliability at scale through an integrated data platform of open source technologies such as Apache Cassandra, Apache Kafka®, Apache Spark™, Redis™, and Elasticsearch™. Instaclustr allows companies to focus internal development and operational resources on building cutting edge customer-facing applications. Instaclustr now has more than 100 million node hours and 7 PB of data under management across its open source technology suite.

For more information, visit Instaclustr.com and follow us @Instaclustr.