Skip to Content

Main Content

Plan With Peace of Mind on a Secure and Scalable Platform

Vena leverages the power of cloud computing to provide a scalable, flexible and secure enterprise-class planning and analysis solution.

Request Demo View Datasheet

security-hero-image

Vena Approach	Highlights	Benefits
Access to Production Systems	Vena grants least privilege access to production infrastructure through AWS SSO integrated with Vena’s federated identity, MFA and VPN controls.	Strict access controls and audit logging prevent unauthorized access and secure customer data.
Logical Data Separation	Vena logically isolates customer data, providing individual database instances not shared across clients.	Secure long-term storage with no mixing of customer data.
Data Encryption in Transit	All communications to Vena’s cloud environment leverage TLS 1.2 encryption or higher.	Secure Excel, web and Extract Transform-Load (ETL) data transfers and workflows.
Data Encryption at Rest	All data is encrypted at rest using AES 256-bit or stronger encryption. Private keys are managed using the AWS Key Management Service.	Decryption uses short-term cryptographic leases, ensuring keys never leave protected memory.
Data Backup and Disaster Recovery	Vena performs nightly customer data backups across multiple cloud provider regions.	Customer data is always stored redundantly and can be restored from backups during disaster recovery.
User Level Data Security	Restrict access to data through customizable Role-Based Access Controls.	Set per-user permissions for fine-grained access control to sensitive information.
Audit Trails	Track all document, spreadsheet, budget, report, template and cell-level data changes with date, time and user stamps, version histories and rollbacks.	Comprehensive audit capabilities enable forensic investigations and internal accountability while addressing regulatory compliance mandates.
User Authentication	Vena supports multiple user authentication mechanisms such as Single Sign-On (SSO), multi-factor authentication and IP restrictions.	These mechanisms provide your organization with layered user authentication and authorization controls.