Skip to main content
Last updated on

Compliance security profile

This page describes the compliance security profile, its compliance controls, and supported features. To enable the compliance security profile, see Configure enhanced security and compliance settings.

Compliance security profile overview​

The compliance security profile enables additional monitoring, a hardened compute image, and other features and controls on Databricks workspaces. The compliance security profile includes controls that help meet the applicable security requirements of some compliance standards. Enabling the compliance security profile is required to use Databricks to process data that is regulated under the following compliance standards:

You can also select to enable the compliance security profile for its enhanced security features without conforming to a compliance standard.

If you enable this feature on any workspace, you are charged for the Enhanced Security and Compliance add-on as described on the pricing page.

important

  • If your workspace was enabled for HIPAA compliance prior to the release of the compliance security profile, you must enable the compliance security profile for your workspace.

  • You are solely responsible for ensuring your own compliance with all applicable laws and regulations.

  • You are solely responsible for verifying that sensitive information is never entered in customer-defined input fields, such as workspace names, compute resource names, tags, job names, job run names, network names, credential names, storage account names, and Git repository IDs or URLs. These fields might be stored, processed, or accessed outside the compliance boundary.

note

Account-level Genie One does not aggregate data from workspaces that have the compliance security profile enabled. See Use Genie One.

To provide Unity Catalog and other Databricks features, Databricks stores your Databricks identities and their attributes in the United States and in each region you have a workspace. For more granular control over the regions in which your identities are present, create separate Databricks accounts. Please contact Support for assistance if needed.

Compliance security profile security enhancements​

Security enhancements include:

  • A hardened operating system image that includes:

  • Automatic cluster updates, ensuring clusters have the latest updates by periodically restarting them during configurable maintenance windows. See Automatic cluster update.

  • Enhanced security monitoring, which includes monitoring agents that generate reviewable logs. See Monitoring agents in Databricks compute plane images.

  • Communications within the cluster and for egress use TLS 1.2 or higher, including communication with the metastore.

On this page