Strategy Cloud
The Strategy Cloud offering (“Strategy Cloud”) is a service for customers of all sizes using a hybrid Platform-as-a-Service (PaaS) delivery model. The PaaS model is designed to deliver the Strategy Platform for building and serving Analytics, Mobility, and Security applications thatis pre-configured by Strategy, coupled with the supporting infrastructure, to enable customers to rapidly enjoy the value and benefits of the Strategy Platform without having to deploy and manage the underlying IT infrastructure.
The Strategy Cloud offers compute power, database storage, content delivery and other functionality to allow our customers to build applications with increased flexibility, scalability and reliability. The core of the Strategy Cloud offering is the Strategy Analytics, Mobility, and Security components that provide customers with a secure, scalable, and resilient Business Intelligence application platform. It also includes the necessary Cloud Infrastructure components (listed below) needed to operate, access, and manage the environment. Customers are provisioned with their own dedicated cloud environment based on a predefined configuration. Once a customer takes ownership of the environment, they can develop, tailor and manage the application components to meet their respective company needs. Based on this operating model, customers control the Analytics, Mobility, and Security application stack; Strategy maintains control over the supporting physical and virtual infrastructure.

Cloud customers are provisioned and assigned their own Strategy Cloud instance, where their respective servers reside logically segmented from all other Strategy Cloud instances. Strong network access controls have been implemented through Software Defined Networking (SDN) and isolated customer networks, and Strategy Cloud management networks. Customers are permitted to access their assigned analytics application resources; all other network traffic is denied.
Infrastructure deployment automation tools are used to build and deploy servers within the Strategy Cloud. All virtual machines built are based on standardized templates and are assigned computing resources (RAM, disk space, and CPU) from the storage and compute resources. Virtual server Operating Systems are deployed using standardized secured baseline configurations and managed centrally through configuration management software. All servers in the Strategy Cloud have host-based firewalls and anti-malware software installed, with all configurations and policies centrally controlled. All components of the Strategy Cloud are monitored 24 hours a day, 365 days a year through a suite of system availability and health monitoring software tools configured to notify our staff in the event of a problem.

Strategy Cloud Security & Compliance
The Strategy Cloud Compliance Program enables customers to understand the robust controls in place to maintain security, compliance, and data protection. As applications are built on the Strategy Cloud Platform, compliance responsibilities are shared. By providing a governed platform as a service, we enable customers to establish and operate in a security control environment. The Strategy Cloud controls are based on the Service Organizational Controls (SOC) 2 security and availability Trust Criteria.
As such, Strategy is able to map its controls to the most common industry control frameworks, including PCI, HIPAA and Safe Harbor. Currently, Strategy Cloud is compliant with HIPAA requirements and is certified compliant with PCI DSS 3.1, Safe Harbor, and SOC2 Type II controls and requirements. Amazon Web services maintain SOC1, SOC2 Type II, and PCI certifications up to the hypervisor level, and Strategy is responsible for the operating system level and above.
Strategy Platform (Early Adopter) | Strategy Platform (Early Adopter) | Strategy Platform (Early Adopter) |