// Trust & Security Report
Altair Engineering, Inc. (a Siemens business) — product marketed as "Rapidminer" / "Altair RapidMiner"
Enterprise data science, AutoML, and MLOps platform (RapidMiner Studio/AI Studio, AI Hub/Server, Graph Studio, SLC, Monarch, Panopticon, Knowledge Studio) originally built by RapidMiner Inc., acquired by Altair Engineering in 2022, and now sold as part of Siemens Digital Industries Software following Siemens' 2025 acquisition of Altair.
Certifications held
1
Maturity
Enterprise
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on siemens.com“"This Privacy Notice explains how we collect, store, use, disclose and transfer...your personal data"; Siemens states it holds EU Binding Corporate Rules (BCR) approval and a UK BCR Addendum from the Information Commissioner's Office for international personal-data transfers.”
> Show 8 unconfirmed / not-held certifications
source: rapidminer.comNo public evidence on a live vendor-domain page. A 2022 blog post titled "SOC 2 Security Certification" existed at rapidminer.com/blog/soc-2-security but that URL now 302-redirects to a generic Altair newsroom page (https://altair.com/newsroom/?ref=rapidminer) with no SOC 2 content — the original claim cannot be re-verified live.
source: altair.comNo public evidence tied to RapidMiner on a live vendor page. Search-engine caching attributes a claim ("Altair is committed to employing an ongoing security management system in line with ISO27001:2022... independently accredited by Securisea CB") to altair.com/software-security-measures, but that URL now 307-redirects to a generic Siemens corporate page with no such content, so it could not be confirmed live. Separately, Siemens Digital Industries Software's own ISO/IEC 27001 certificate is explicitly scoped to "Siemens Industry Software Inc. (Plano)" — the former Mentor/Siemens EDA business — and does not name Altair or RapidMiner.
source: rapidminer.comNo public evidence of a HIPAA certification or Business Associate Agreement (BAA) offering. Vendor markets healthcare/life-sciences use cases (claims processing, patient analytics) but makes no HIPAA compliance or BAA claim on any reachable vendor page.
No public evidence; not applicable — product does not process payment card data.
source: siemens.comNo RapidMiner/Altair-specific evidence found. Siemens Digital Industries Software holds ISO 27017/27018 certificates, but scoped to "Siemens Industry Software Inc. (Plano)", a different product line (EDA/PLM), not named as covering RapidMiner or Altair.
No public evidence found on any vendor-domain page.
source: siemens.comNo RapidMiner-specific evidence. Siemens Digital Industries Software lists a CSA STAR Level One CAIQ, but scoped to "Xcelerator as a Service" and "Cloud Application Services (CApS)" offerings, not named as including RapidMiner/Altair One.
No public evidence found.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Offered
Data region
Not specified at the RapidMiner product level. Parent Siemens operates data centers globally and relies on EU Binding Corporate Rules for cross-border transfers; no RapidMiner-specific data residency commitment was found.
Rapidminer's generative-AI features route to third-party/foundation LLMs and let users fine-tune models on their own uploaded data, but no vendor-domain page states whether customer data is used to train underlying/foundation models or offers an explicit opt-out. Prior (now-redirected) Altair privacy text indicated that for organization-provided access, Altair processes personal data "under the direction of your organization" and "is subject to a data processing agreement between your organization and Altair," implying DPAs are available for enterprise customers, but this could not be re-confirmed on the current live privacy-notice page after the Siemens redirect.
// Security controls
Encryption in transit
AI Hub/Server documentation states HTTPS/TLS is recommended and, from version 2025.0 onward, plain HTTP is no longer supported; supports TLS offloading and custom CA certificates.
docs.rapidminer.comAuthentication / SSO
AI Hub uses an integrated Keycloak identity provider for centralized user management, SSO via SAML 2.0 or OAuth2, two-factor authentication (Google Authenticator/FreeOTP), and LDAP/Active Directory federation.
docs.rapidminer.comAccess control
Role-based access control and fine-grained permissions for shared repositories, models, and processes.
docs.rapidminer.comAudit logging
Login events (authentication/authorization) and admin events (Keycloak configuration changes) can be logged to the database and queried/filtered.
docs.rapidminer.com// Products & data scope
data: User-provided datasets and models; can run entirely as local/desktop software or connect to central AI Hub.
Core visual drag-and-drop workflow product with AutoML and generative-AI integrations; self-hostable/desktop by design.
data: Centrally stores models, processes, credentials, and repositories for teams.
Supports on-premise, cloud (AWS/Azure marketplace images), or hybrid deployment via Docker Compose/Kubernetes; SSO/2FA and RBAC available. Enterprise tier required for SSO/on-prem per third-party pricing summaries.
data: Connects and semantically links fragmented enterprise data sources.
Newer offering targeted at agentic-AI and contextual-reasoning use cases.
data: Existing SAS-language programs and associated data.
Executes SAS-language code without translation or third-party SAS licenses; also supports Python/R/SQL.
data: Self-service data blending/cleansing from multiple source systems.
80+ pre-built transformation functions.
data: Streaming and time-series data feeds.
Targeted at industries needing live operational dashboards.
data: Model outputs and decision paths.
Interactive decision/strategy-tree modeling for explainability.
// What to watch
- Vendor identity in flux: RapidMiner Inc. was acquired by Altair Engineering (2022), and Altair was acquired by Siemens (deal completed 2025); nearly every Altair-branded compliance/security/privacy page (altair.com/compliance, /information-security, /software-security-measures, /privacy-policy, /generative-ai) now redirects to generic Siemens corporate pages that do not mention RapidMiner or Altair at all.
- Legacy SOC 2 claim (2022 blog post title) is no longer reachable at its original vendor URL and cannot be re-verified with a live proof quote — do not display a SOC 2 badge based on it.
- Legacy ISO 27001:2022 claim (Securisea CB accreditation) attributed to a now-redirected Altair page could not be confirmed on a live vendor page — do not display an ISO 27001 badge based on it.
- Host/parent-vs-product cert ambiguity: Siemens Digital Industries Software's own ISO 27001/27017/27018 and SOC 3 certificates are explicitly scoped to "Siemens Industry Software Inc. (Plano)" (the former Mentor/EDA-PLM business), not to Altair or RapidMiner — these should not be represented as covering the RapidMiner product.
- No RapidMiner/Altair-specific trust center currently resolves live; the only reachable evidence page in the initial capture was a Siemens corporate "Altair is now part of Siemens" announcement with no security content.
- AI-training posture (whether customer data trains foundation/generative-AI models used in Rapidminer's GenAI features) is unconfirmed on any live vendor page.
// At a glance
Pricing model
Freemium plus row-volume-tiered per-user annual subscription (free tier up to 10,000 rows/process; paid tiers roughly $2,500-$10,000/user/year scaling with row volume and processors); custom enterprise pricing (reported $50,000+/year) required for SSO and on-premise deployment. Pricing is sourced from third-party summaries, not a vendor pricing page captured directly, and should be re-verified before display.
Self-hostable
Yes
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Altair Engineering, Inc. (a Siemens business) — product marketed as "Rapidminer" / "Altair RapidMiner"'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-08. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
siemens.com