Architecture & Security
Overview
Definity is deployed as a SaaS provider and allows customers to choose an internal customer deployment for security and compliance requirements.
Components
Definity uses dedicated data pipeline agents that are added by configuration to each pipeline in the customers' data platform. The agents run as part of the customer's data pipeline and communicate with definity platform server.
The agents send metadata and metrics to the server. The server persists the metrics, runs analysis on the metrics to identify potential issues in the user data pipelines, and exposes a web application for to the pipeline owners.
Agent instrumentation
Definity agents are added to the data pipeline and run as part of the pipeline. Specific instrumentation info be found in the relevant installation section.
Server deployment options
SaaS Deployment
definity platform server is hosted in definity's cloud provider. All communications with the agents and the web application is TLS encrypted and authenticated with OAuth token. definity extracts and transmit only statistical metrics and metadata of your data pipelines. No data is being either digested or sent to definity,
Customer internal Deployment
definity server can be deployed as a service in the customer internal network / VPC. This means no data enters or leaves the customer's premise and definity team have no access to the deployment. This option requires a dedicated DevOps/champion to support server upgrades and maintenance.
The server deployment is provided as a standard helm / docker as described in the installation page.
