GCP Data Access Policy

At Strategic Blue we control access internally through a number of role based access roles. This ensures that we as a company, and our staff, as individuals, have only the minimum access required to deliver our value. We enforce security through multiple technical controls, ensuring that only the necessary access is granted based on job roles.

Staff members have specific role-based permissions that define the actions they can perform.

• Billing Administrator. Establish the viewer role, and grant access: Technical Account Managers
• Billing Viewer: Account Managers, Technical Account Managers, Portfolio Management Team, Finance Team
• Billing Operator (selection and purchase of committed use discounts): Portfolio Management Team 

Our Google Savings Review provides an assessment of your current Google rate optimization approach based on read-only access to your Billing ID. (i.e. Billing Viewer access)

This access is restricted to billing information, we cannot review your usage.

The access needed to deliver our rate optimization services is limited to billing and commitment information: 

• We will be the Billing Owner, as we provide the Billing Account . 
• To identify and provide recommendations for cost optimization we also require
  • Billing Account Usage commitment recommender administrator
  • Spend Based commitment recommender administrator

We do not have access to your projects, or any of teh data within the projects.

No. We only have access to the billing meta-data, with no access to any usage data.

We have no access to IP addresses or server names, unless, contrary to best practice, you have chosen to include it within cost tags. We have no access to VPC and subnet information, nor any access to data flow logs and information.

Staff have very limited access to client information beyond the monthly cloud spend which is managed by the Finance team for billing purposes and the recommendations report which is managed by the Account management team. Access to systems and file shares is managed on a ‘need to know’ basis.

Our sales & marketing team holds (potential) customer information for the purposes of information updates & sales, which is handled appropriately with the required opt-out options. 

Our Account management team holds and maintains basic customer information (name, email, job title) as required to contact you to perform our business function. 

We do not have any access to any of your customer information. 

By default we recommend that you create and manage your own Google Organisation and Projects. We will provide Billing Account information to route the invoice flow through Strategic Blue.

For testing purposes, we can create projects for you to use as sandpit spaces for initial testing, but as the google project creators we automatically have Project Owner access, and therefore rights to the data within a project.