Launch follows a rigorous security framework to ensure it meets even the highest standards.
At Adobe, we follow a security-by-design approach to ensure that our products — including Launch, by Adobe — have security inseparably intertwined into each facet of the product lifecycle. This means you can trust that Launch will satisfy the most rigorous security standards.
Absolute control
Launch delivers control to customers through user rights management and self-hosting.
Instead of user roles, like DTM and other tag managers offer, Launch enables administrators to add users to granular rights of specific properties. This subtle nuance gives customers a simpler path to understand which users are enabled for specific tasks per property, such as the right to add extensions vs. create, and test rules vs. publish to production. This structure allows customers to better ensure that the correct users have the correct rights.
Other tag management systems require one (or sometimes more) third-party content delivery networks (CDNs) to host their application. Although this is convenient for customers, this design often increases a company’s risk profile by introducing more variables and relinquishing control over a critical component of architecture to a third-party. Launch, by Adobe, takes a different approach.
Customers can host their Launch libraries using our partnership with Akamai or on their own servers — this is known as self-hosting. With self-hosting, Launch can inherit the security measures already in place in the customer’s environment, which provides both confidence and absolute control.
Total transparency
The core Launch rules engine is known as Turbine, and it’s open-sourced under an Apache 2.0 license. Any company is welcome to inspect this source code to glean a complete understanding of how the core components of Launch operate.
To access the source code, visit this Github repository: https://github.com/Adobe-Marketing-Cloud/reactor-turbine.
Works with any identity type
Regardless of your identity management system, Launch can integrate with it. Launch supports three identity types:
- Adobe ID: This identity type is owned and managed by the end user. Adobe performs the authentication, and the end user manages the identity. Users retain complete control over files and data associated with their ID.
- Enterprise ID: This identity type is created, owned, and managed by an organization. Adobe hosts the Enterprise ID and performs authentication, but the organization maintains the Enterprise ID. End users cannot create an Enterprise ID.
- Federated ID: This identity type is created and owned by an organization and linked to the enterprise directory via federation. The organization manages credentials and processes Single Sign-On via a SAML2 Identity Provider (IdP).
For more information, visit https://helpx.adobe.com/enterprise/using/identity.html.
Common controls framework
The Adobe Common Controls Framework (CCF) is a set of security activities and compliance controls that is implemented within our product operations teams, as well as in various parts of our infrastructure and application teams. In creating the CCF, Adobe analyzed the criteria for the most common security certifications for cloud-based businesses, and rationalized the more than 1,000 requirements down to Adobe-specific controls that map to approximately a dozen industry standards.
