Book page

Can the Eurostat instances of the SDMX converter web application / web service be used for confidential data?

Fernando MORENTE-ORIA
Fernando MORENTE-ORIA • 18 December 2023

The SDMX converter is available in different “flavours”. Each flavour provides the same basic functionalities, but has different characteristics that make it more suitable for different use cases. For two such flavours, the web application and the Web Service, a Eurostat-hosted instance is available, which can be used by interested users without the need for any local installation.  

Organisations that are considering using Eurostat’s instance of the SDMX Converter Web App / Web service with confidential data, they should be aware of the following characteristics:

  • Data retention: Eurostat’s instances of the SDMX Converter Web App / Web service do not retain the data that are uploaded to it. Once a validation / conversion session is terminated, the relevant input and output data files are deleted from the servers.
  • Data exchange security measures: Data are uploaded to or downloaded from Eurostat’s instance of the SDMX Converter Web App / Web service using the secure HTTPS protocol. However, Eurostat’s instance of the SDMX Converter Web App / Web service does not offer the same security guarantees that can be applied to confidential data when making official data transmissions to Eurostat via EDAMIS. In particular:
    • Eurostat’s instance of the SDMX Converter Web App / Web service does not support the use of data encryption using the PGP standard for the upload / download of data.
    • Eurostat’s instance of the SDMX Converter Web App / Web service is available over the Internet and is not available over private secure networks such as TESTA or CCN.

Each organisation should assess whether the security guarantees provided are acceptable before using Eurostat’s instance of the SDMX Converter Web App / Web service with confidential data. If an organisation does not wish to use the SDMX Converter Web App for confidential data but would still like to use the SDMX Converter, they may opt to install one of the available “flavours” of the SDMX Converter locally.