Trusted identities
- With state-of-the-art, secure onboarding and vetting processes, the orchestrator of the Data Marketplace or Data Hub can keep control over who has access to the data exchange ecosystem, from organizations down to individuals. Access and authorizations can be revoked anytime through the administration console.
- Dawex Data Exchange solution supports identity federation and SSO for authentication & authorization via OpenID Connect.
- The Data Exchange Platform solution can interoperate with solutions providing Self Sovereign Identities, making use of Decentralized Identifiers (DID), and connect with Identity Wallets providing verifiable credentials for natural and legal persons.
- Extensive data product visibility settings are at the disposal of the data provider. Data product offerings can be exposed privately to selected organizations and individuals, exposed to all participants of the platform and even, if the data provider chooses, exposed publicly for marketing purposes to non-platform participants. Private sub-groups can be defined to expose and exchange data between participants on a selected topic.
- Group, role and user access permissions settings are supported by MFA (Multi Factor Authentication) through One-Time-Passwords (OTPs) and Role Based Access Control (RBAC).
- Data security and privacy-by-design which means that all data stored on the platform is encrypted, and participants or the orchestrator can only read the metadata associated and available in the data catalog.
- Preset licenses, reusable and configurable, allow the data provider to precisely define terms and conditions of use for public/private, open/commercial, or free/paid data exchanges.
- Personal data is managed in compliance with GDPR and non-European personal data regulations such as CCPA and APPI or others. Specific workflows are provided to declare, manage and mask such data all along the transaction process.
- An API connection to Authorization & Consent Managers systems is provided, ensuring for each data request that the data acquirer benefits from the consent to access and use the data product.
- Dawex is working on implementing “compliance as code” through Open Digital Right Langage (ODRL) to define and enforce policies using code that automatically checks that the use of the content is compliant with the defined policies.
- In decentralized mode, the Data Exchange Platform interoperates with connectors such as EDC ones, and synchronizes the policies and access rights between the Data Exchange Platform and the EDC connector in local information systems.
Traceability
The Data Exchange Platform solution from Dawex provides a wide range of tools for data providers to trace data transactions and the accesses to data products, thus reinforcing the level of trust delivered by the solution.
Through the administration console, the orchestrator can monitor activities and perform deep-dive audits on past activities. Data privacy is fully preserved as the orchestrator has never access to the data itself.
Participants can navigate through data offerings and explore metadata associated with each data product. Data providers can monitor and trace accesses relative to their own data products.
