Skip to main content

Pega Cloud Responsibility Model

The Pega Cloud Responsibility Model outlines the division of responsibilities between you and Pega. With Pega Cloud, you can focus on developing and managing applications to achieve your business goals while Pega manages the rest.

Managing your applications

Pega provides many management, operation, and security services in Pega Cloud. Clients also have responsibilities which are specific to their applications: 

Client Responsibilities  

Connectivity
Development
Management
  • User Access: Set up SSO, define authentication rules, and assign roles for your application.
  • Monitor Performance: Use the Pega Diagnostic Center (PDC) to track app health and receive alerts
  • Manage Data: Use Schema Tools and Query Runner to manage data and cloud data storage.
  • Adopt Updates: Initiate Pega software updates in My Pega Cloud, test the update in a clone environment, and provide a Go-NoGo decision before deployment. Pega applies software patches during your agreed-upon maintenance window and delivers critical hotfixes automatically as needed. Continuous infrastructure updates take place without downtime, allowing you to continue using your applications during the update process.

Pega Responsibilities

Pega-as-a-Service
  • Product Development: Pega builds Pega Infinity™ products and industry solutions. 
  • Product Compatibility: Pega maintains compatibility across all Pega products and cloud services through a unified software maintenance program. 
  • Updates: Pega regularly updates deployments to the latest Pega Infinity version so you can take advantage of  new features and security enhancements. 
  • Patches: Pega applies cumulative patches without downtime aligned to a structured release schedule.
  • Hotfixes: Pega applies critical hotfixes to maintain operational continuity
Cloud Operations
  • Backup: Pega schedules regular backups to support recovery in case of data loss.
  • Failover: Pega enables automatic failover to support resilience.
  • Capacity Planning: Pega forecasts infrastructure needs to support scalability.
  • Observability and Monitoring: Pega monitors infrastructure health and performance.
  • Incident Management and Support: Pega manages incidents through structured support, established procedures and escalation paths.
  • Network Connectivity: Pega manages cloud network infrastructure network infrastructure, connectivity, and communication pathways across Pega Cloud.
  • Deployment: Pega installs and configures Pega software and related components in your Pega Cloud environments based on your subscription
  • Configuration: Pega maintains Pega Cloud configurations, including infrastructure settings and database connections. 
  • Secrets: Pega manages sensitive information such as passwords, API keys, and certificates for Pega Cloud.
  • Routing: Pega optimizes traffic and resource distribution.
Cloud Security
  • Penetration Testing: Pega conducts authorized security assessments to identify vulnerabilities and validate the effectiveness of security controls.
  • Anti-virus and Malware Protection: Pega deploys antivirus tools to protect systems from malicious software threats.  
  • Encryption in Transit: Pega protects data as it moves between systems and across networks.
  • Encryption at Rest: Pega encrypts data stored in databases, file systems, and backup systems to protect against unauthorized access.
  • Vulnerability Management: Pega identifies and addresses security vulnerabilities in infrastructure components and software.
  • Threat Detection: Pega monitors and responds to threats to mitigate potential security incidents.
  • Audits: Pega performs regular security and compliance checks to validate adherence to security and operational standards.
  • Compliance and Trust Center: Pega maintains compliance certifications and provides transparency about security practices and compliance status.
  • Forensics: Pega investigates security incidents and analyzes digital evidence to understand attack vectors and prevent future incidents.
  • Infrastructure Access Management: Pega manages digital identities, authentication mechanisms, and access controls for Pega Cloud administration tools.
Cloud Infrastructure
  • Client Isolation: Pega ensures separation of client environments and data to prevent unauthorized access between different client instances.
  • Compute: Pega manages computational Pega Cloud resources.
  • Disaster Recovery: Pega implements comprehensive plans and procedures to restore services and data after major system failures or disasters.
  • High Availability: Pega designs and maintains systems to minimize downtime and maintain continuous service availability through redundancy and fault tolerance.
  • Scaling: Pega automatically adjusts infrastructure capacity based on demand to maintain performance. 
  • Storage: Pega delivers scalable and reliable data storage solutions including databases, file systems, and backup storage. 
  • Scheduling: Pega manages the distribution and execution of computational tasks across Pega Cloud infrastructure resources.
  • Microservice design: Pega architects Pega Cloud using microservices patterns to improve scalability, maintainability, and deployment flexibility.

In the following image, click the + icons to learn more about the responsibilities of clients and Pega:

For detailed information on the Pega Cloud Responsibility Model, see the full Pega Cloud Responsibility Model documentation.

Key takeaways

Both clients and Pegasystems contribute to the success of cloud applications. By understanding your responsibilities and Pegasystems’ responsibilities, you can focus on managing your business applications while relying on Pega for connectivity, development, and management.

Related content

Check your knowledge with the following interaction:


This Topic is available in the following Module:

If you are having problems with your training, please review the Pega Academy Support FAQs.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best.

Pega Academy has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice