Security and trust
How Assurance connects, what it holds, and where it runs.
How Assurance connects
Process Authority and Out-of-Process Detection run in the cloud, connecting to your tenant through Anaplan's published APIs. Nothing is installed in your environment for either layer.
Connection is by a certified service user that you create and control in your own tenant, at a permission level we specify in writing before you grant it. That service user is the only connection Assurance holds to your tenant.
Assurance reads the landscape and initiates promotions through Anaplan's own mechanism. It writes no data values into a model. Every action it takes in your tenant, including promotions, backups, and taking models offline, runs through the certified service user and is recorded.
The Verifier is deployed on premises, because verification requires access to state that is better kept inside your environment. It performs its analysis locally. Only a summary of findings returns to the cloud: what drifted, where, and how significant. The model detail and data it compared stay in your environment. Expected 2027.
What Assurance holds
In the cloud
Structural data, and the identity of the people who participated in a promotion.
Held
- Promotion and approval records: who requested, who approved, who executed, what moved, when, and to where
- Revision tag metadata, environment identifiers, and timestamps
- Structural comparison output
- Findings raised by detection, and their disposition
Not held, by design
- List members
- Cell values
- Business data of any kind
On premises, in the Verifier
The Verifier holds a detailed baseline of the application and performs its analysis locally. Only a summary of findings returns to the cloud: what drifted, where, and how significant. The model detail and data it compared stay in your environment. Expected 2027.
The detail underlying a comparison stays in your environment and can be inspected there.
Access and permissions
Assurance requires a certified service user in your Anaplan tenant, at a permission level we specify in writing before you grant it.
Roles, selective access, and workspace permissions are administered in Anaplan and stay there, under the people who own them.
Vendor review
Xentrl Assurance is a product line of Valizant, Inc., operating since 2015. Valizant holds an established vendor record with enterprise procurement and security functions through Fortune 500 delivery since 2015. For security questionnaires and vendor documentation, write to connect@xentrl.com.
