Continuous Data Protection

Continuous Data Protection (CDP) encompasses a comprehensive set of features that help protect data stored in Snowflake against human error, malicious acts, and software or hardware failure. At every stage within the data lifecycle, Snowflake enables your data to be accessible and recoverable in the event of accidental or intentional modification, removal, or corruption.

The features include:

Feature Additional Reading
Network policies for granting or restricting users access to the site based on their IP address (i.e. IP whitelisting). Network Policies
Verification/authentication required for any users accessing your account (includes support for MFA and SSO). Multi-Factor Authentication (MFA) — standard for all accounts; enabled per user . Federated Authentication & SSO — requires Snowflake Enterprise Edition (or higher)
Security roles for controlling user access to all objects in the system. Access Control in Snowflake
Automatic 256-bit AES encryption of data (at rest and in transit); 128-bit or 256-bit AES encryption of all files staged for loading/unloading data. Data Encryption
Maintenance of historical data (i.e. data that has been changed or deleted) through Snowflake Time Travel (for querying and restoring data) and Fail-safe (for disaster recovery; can only be performed by Snowflake). Snowflake Time Travel & Fail-safe

Most Continuous Data Protection features are included standard for all Snowflake Editions (i.e. no additional licensing is required); however, some features are available only for Snowflake Enterprise Edition (or higher).

In addition, both Time Travel and Fail-safe require additional data storage, which has associated fees. For more details, see Data Storage Considerations.