Splunk has a dedicated financial services program for our customers in the financial services sector who are subject to additional regulations that relate to outsourcing, third-party risk management and cloud services. We have taken into account various global regulations including the European Banking Authority Outsourcing Guidelines 2019, guidance issued by the United States Federal Banking Regulations and Federal Financial Institutions Examination Council on outsourcing and third party risk, and the Monetary Authority of Singapore’s Outsourcing Guidelines 2018, amongst others.
Our financial services program includes robust security terms, a business continuity and resilience management program, performance management and monitoring, a pre-sales due diligence assessment and a three-tiered audit program to help our customers meet their compliance requirements. More information about Splunk’s approach to financial services regulations is available in our White Paper.
Splunk recognizes that public sector customers have to adhere to a variety of regulations governing how they procure software and cloud services and have stringent requirements for the types of organizations they can do business with. Splunk’s products meet a variety of certification standards required by our public sector customers. We have taken a robust approach when it comes to our focus on environmental sustainability. Splunk works with a large variety of local authorized channel partners who participate in a myriad of government contracting vehicles and framework agreements. Our Splunk General Terms provide you with an insight on the core licensing model that we and our partners use when selling Splunk’s offerings.
Splunk acknowledges that protected health information is a sensitive category of personal data, and offers customers regulated by HIPAA with a premium HIPAA environment for our Splunk Cloud Platform service. In addition to the protections already granted by the Splunk General Terms and the Splunk Cloud Platform Security Addendum, if you elect the premium HIPAA environment and require a Business Associate Agreement (BAA), you may download and electronically sign the Splunk BAA. The Splunk BAA establishes how Splunk complies with HIPAA in connection with protected health information in Splunk Cloud Platform’s HIPAA environment.