Informatica Data Governance

The market leading data governance framework provides an intelligent solution for data governance and compliance playing an important role in addressing risk, compliance and regulation challenges including General Data Protection Regulation (GDPR) Features within the framework include data quality, data lineage, impact assessment, business glossary.


  • Semantic search with intelligent facets
  • Data lineage and impact analysis
  • Automated classifications, Business Glossary
  • Sensitive Data Risk Analytics & Data Proliferation Analysis included
  • Integrated data quality & Test Data Management
  • Integrated Test Data Warehouse & Test Data Generator
  • Intelligent data matching allowing for known nicknames and aliases etc
  • Standard and Advanced Testing Bundle(s) available
  • User Behaviour Analytics, Access, and Activity
  • Out-of-the-box connectivity to over 200 enterprise apps and data sources


  • Alert on High Risk Conditions
  • Remediate Risk
  • Prioritize Security Investments
  • Streamline Sensitive Data Audit and Governance
  • Visibility to Sensitive Data Proliferation
  • Enable collaboration across the organization
  • Discover and catalogue all types of data across the enterprise
  • Enrich data assets with business context and crowdsourced annotations
  • Web-based tool simplifies data integration administration, monitoring, and auditing
  • Cost-Effectively Monitor and Cleanse Data Across the Enterprise


£285870 per unit per year

Service documents


G-Cloud 11

Service ID

6 6 2 9 5 8 6 7 2 4 4 7 6 3 5



Henrietta Malpass

0141 332 9785

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Informatica Data Quality can be used as a stand alone service or as part of the Informatica Intelligent Data Platform providing ETL, MDM , Data Masking and Big Data Management. In addition the solution include data governance features including lineage, business glossary and solutions to support in GDPR compliance.
Cloud deployment model
Hybrid cloud
Service constraints
A light weight application called a Secure Agent needs to be installed on a server (this could be on an on-premise server, or on an AWS or MS Azure server) in order to process the integration data.
System requirements
  • Microsoft Windows or Linux
  • Microsoft SQL Server, Oracle Database or IBM DB2
  • Requirements are for modules hosted outside of Informatica cloud services

User support

Email or online ticketing support
Email or online ticketing
Support response times
The Premier support program has been tailored for small to medium enterprises needing committed response times for business-critical implementations. The Premier support program provides unlimited access to GCS during business hours for all assisted support needs. The response times for Priority 1 is 2 hours, Priority 2 is 4 hours and Priority 3 is 8 hours.
User can manage status and priority of support tickets
Online ticketing support accessibility
None or don’t know
Phone support
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
None or don’t know
How the web chat support is accessible
Web chat accessibility testing
None completed.
Onsite support
Onsite support
Support levels
• UK Working Hours (Monday to Friday 0830-1730)
• UK Working Hours + Out Of Hours On Call
• 12x5 (Monday to Friday for a 12 hour window) – A longer shift pattern to support flexible working hours or start/end of day batch processes etc
• 12x5 + Out Of Hours On Call
• 24x7
Support available to third parties

Onboarding and offboarding

Getting started
Agile Solutions has a set of Advisory Services that can help build a vision, roadmap and plan for your implementation. In addition, Informatica provide an on-boarding service for new customers where a Custom Success Architect works with the customer on their first few use cases to perform knowledge transfer and ensure their first use cases are successful. In additional all customers have access to our free online training called Cloud Academy.
Service documentation
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
We do not store any customer data within our tool, other than the metadata for the integration jobs and processes created within the application. All the metadata for the integration jobs can be exported at the termination of the contract.
End-of-contract process
The customer's licenses on the organisation to access the service are removed and no users can access the application.

Using the service

Web browser interface
Supported browsers
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Firefox
  • Chrome
Application to install
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • Windows
Designed for use on mobile devices
Differences between the mobile and desktop service
The mobile app is purely for monitoring the application, with the desktop application (the Secure Agent) being the mechanism by which the integration jobs are run.
Service interface
Description of service interface
Informatica offers an easy to use, web-based interface that is designed for business users and IT functions alike . The new user interface design provides a consistent look and feel across all Data Governance functions tailored to user roles.
Accessibility standards
None or don’t know
Description of accessibility
The service is available via a browser and as such leverages the accessibility features within the browser and within the users operating systems.
Accessibility testing
None completed.
What users can and can't do using the API
All integration mappings and services, as well as monitoring services are exposed over the Rest API. All users with access to the tool, will also have access to the API.
API documentation
API documentation formats
API sandbox or test environment
Customisation available


Independence of resources
Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them.

Services which provide virtualized operational environments to customers ensure that customers are segregated via security management processes/controls

Informatica continuously monitors service usage to project infrastructure needs to support availability commitments/requirements. Informatica maintains a capacity planning model to assess infrastructure usage and demands at least monthly, and usually more frequently. In addition, the Informatica capacity planning model supports the planning of future demands to acquire and implement additional resources based upon current resources and forecasted requirements.


Service usage metrics
Metrics types
DiscoveryIQ provides metrics on number of integration jobs run and their performance. Global performance statistics are available publicly on our trust site.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports


Supplier type
Reseller providing extra features and support
Organisation whose services are being resold

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with SSAE-16 / ISAE 3402
Data sanitisation process
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
Using the in built export capabilities.
Data export formats
  • CSV
  • Other
Other data export formats
  • XML
  • JSON
  • EDI
  • XLS
  • CLEF
Data import formats
  • CSV
  • Other
Other data import formats
  • XML
  • JSON
  • EDI
  • XLS
  • CLEF

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks
Using redundant data transmission architecture provides protection against issues like network failure or congestion, sniffer attacks, unavailable apps, and DBMS issues. The Secure Agent can work with a security proxy or gateway set up by the customer. Informatica users can connect easily and safely to on premise or other cloud services with the assurance of safe data transmission.
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
Using redundant data transmission architecture provides protection against issues like network failure or congestion, sniffer attacks, unavailable apps, and DBMS issues. The Secure Agent can work with a security proxy or gateway set up by the customer. Informatica users can connect easily and safely to on premise or other cloud services with the assurance of safe data transmission.

Availability and resilience

Guaranteed availability
The service has availability of 99% with down time being used for upgrades.
Approach to resilience
Information available on request under a Non Disclosure Agreement (NDA).
Outage reporting
Public dashboard via the trust site, as well as email alerts.

Identity and authentication

User authentication needed
User authentication
2-factor authentication
Access restrictions in management interfaces and support channels
All cloud data integration services depend on the Secure Agent to access client application, relational database, and file sources and targets The Secure Agent and integrates with Third-party authentication programs to define permissions and the external provider handles authentication.
Access restriction testing frequency
At least once a year
Management access authentication
2-factor authentication

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
How long system logs are stored for

Standards and certifications

ISO/IEC 27001 certification
ISO 28000:2007 certification
CSA STAR certification
PCI certification
Other security certifications
Any other security certifications
SSAE 16 certified

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance standards
ISO/IEC 27001
Information security policies and processes
Available upon request following completion of a Non Disclosure Agreement (NDA).

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Changes to Informatica services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is via explicit access system requests, subject to owner review and authorisation.

All production environment changes are reviewed, tested and approved. Stages include design, documentation, implementation (including rollback procedures), testing (non-production environment), peer to peer review (business impact/technical rigour/code), final approval by authorised party.

Emergency changes follow Informatica incident response procedures. Exceptions to change management processes are documented and escalated to Informatica management.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Informatica performs vulnerability scans on the host operating system, web applications, and databases in the ICS environment. Identified vulnerabilities are monitored and evaluated. Countermeasures are designed and implemented to neutralise known/newly identified vulnerabilities. Informatica is responsible for all scanning, penetration testing, file integrity monitoring and intrusion detection . Informatica works closely with our partners AWS and Azure to maintain the integrity of the ICS environment .
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Informatica deploys (pan-environmental) monitoring devices to collect information on unauthorised intrusion attempts, usage abuse, and network/application bandwidth usage. Devices monitor: Port scanning attacks, Usage (CPU, processes, disk utilisation, swap rates, software-error generated losses), Application metrics, Unauthorised connection attempts. Near real-time alerts flag potential compromise incidents, based on Informatica defined thresholds.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Incidents are logged to Informatica Global Services via phone, online or email. When a Case is opened, a Case number is automatically generated which is used by the customer track progress. The Project's Primary Contact will receive an email confirming the opening of the Case. The customer will be asked to provide or confirm information about the environment and to describe the problem, question or issue. GCS and the customer will agree on the priority of the Case. For high-priority Cases, the primary concern is to find a way for customers to achieve their objective as quickly as possible.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks


£285870 per unit per year
Discount for educational organisations
Free trial available
Description of free trial
This includes a Basic Edition version of our solution, as well as the use of a Secure Agent to download and install.
Link to free trial
The Informatica Cloud trial can be found at the following link -

Service documents

Return to top ↑