Cloud changelog

### Customer Notifications in ClickHouse Cloud[​](#customer-notifications-in-clickhouse-cloud "Direct link to Customer Notifications in ClickHouse Cloud")

ClickHouse Cloud now provides in-console and email notifications for several billing and scaling events. Customers can configure these notifications via the cloud console notification center to only appear on the UI, receive emails, or both. You can configure the category and severity of the notifications you receive at the service level.

In future, we will add notifications for other events, as well as additional ways to receive the notifications.

Please see the [ClickHouse docs](/docs/cloud/notifications) to learn more about how to enable notifications for your service.

  

## October 4, 2024[​](#october-4-2024 "Direct link to October 4, 2024")

### ClickHouse Cloud now offers HIPAA-ready services in Beta for GCP[​](#clickhouse-cloud-now-offers-hipaa-ready-services-in-beta-for-gcp "Direct link to ClickHouse Cloud now offers HIPAA-ready services in Beta for GCP")

Customers looking for increased security for protected health information (PHI) can now onboard to ClickHouse Cloud in [Google Cloud Platform (GCP)](https://cloud.google.com/). ClickHouse has implemented administrative, physical and technical safeguards prescribed by the [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html) and now has configurable security settings that can be implemented, depending on your specific use case and workload. For more information on available security settings, please review our [Security features page](/docs/cloud/security).

Services are available in GCP `us-central-1` to customers with the **Dedicated** service type and require a Business Associate Agreement (BAA). Contact [sales](/cdn-cgi/l/email-protection#5a293b363f291a393633393132352f293f74393537) or [support](https://clickhouse.com/support/program) to request access to this feature or join the wait list for additional GCP, AWS, and Azure regions.

### Compute-compute separation is now in private preview for GCP and Azure[​](#compute-compute-separation-is-now-in-private-preview-for-gcp-and-azure "Direct link to Compute-compute separation is now in private preview for GCP and Azure")

We recently announced the Private Preview for Compute-Compute Separation for AWS. We're happy to announce that it is now available for GCP and Azure.

Compute-compute separation allows you to designate specific services as read-write or read-only services, allowing you to design the optimal compute configuration for your application to optimize cost and performance. Please [read the docs](/docs/cloud/reference/warehouses) for more details.

### Self-service MFA recovery codes[​](#self-service-mfa-recovery-codes "Direct link to Self-service MFA recovery codes")

Customers using multi-factor authentication can now obtain recovery codes that can be used in the event of a lost phone or accidentally deleted token. Customers enrolling in MFA for the first time will be provided the code on set up. Customers with existing MFA can obtain a recovery code by removing their existing MFA token and adding a new one.

### ClickPipes update: custom certificates, latency insights, and more.[​](#clickpipes-update-custom-certificates-latency-insights-and-more "Direct link to ClickPipes update: custom certificates, latency insights, and more.")

We're excited to share the latest updates for ClickPipes, the easiest way to ingest data into your ClickHouse service. These new features are designed to enhance your control over data ingestion and provide greater visibility into performance metrics.

*Custom Authentication Certificates for Kafka*

ClickPipes for Kafka now supports custom authentication certificates for Kafka brokers using SASL & public SSL/TLS. You can easily upload your own certificate in the SSL Certificate section during ClickPipe setup, ensuring a more secure connection to Kafka.

*Introducing Latency Metrics for Kafka and Kinesis*

Performance visibility is crucial. ClickPipes now features a latency graph, giving you insight into the time between message production (whether from a Kafka Topic or a Kinesis Stream) to ingestion in ClickHouse Cloud. With this new metric, you can keep a closer eye on the performance of your data pipelines and optimize accordingly.

  

*Scaling Controls for Kafka and Kinesis (Private Beta)*

High throughput can demand extra resources to meet your data volume and latency needs. We're introducing horizontal scaling for ClickPipes, available directly through our cloud console. This feature is currently in private beta, allowing you to scale resources more effectively based on your requirements. Please contact [support](https://clickhouse.com/support/program) to join the beta.

*Raw Message Ingestion for Kafka and Kinesis*

It is now possible to ingest an entire Kafka or Kinesis message without parsing it. ClickPipes now offers support for a `_raw_message` [virtual column](/docs/integrations/clickpipes/kafka/reference#kafka-virtual-columns), allowing users to map the full message into a single String column. This gives you the flexibility to work with raw data as needed.

## August 29, 2024[​](#august-29-2024 "Direct link to August 29, 2024")

### New Terraform provider version - v1.0.0[​](#new-terraform-provider-version---v100 "Direct link to New Terraform provider version - v1.0.0")

Terraform allows you to control your ClickHouse Cloud services programmatically, then store your configuration as code. Our Terraform provider has almost 200,000 downloads and is now officially v1.0.0. This new version includes improvements such as better retry logic and a new resource to attach private endpoints to your ClickHouse Cloud service. You can download the [Terraform provider here](https://registry.terraform.io/providers/ClickHouse/clickhouse/latest) and view the [full changelog here](https://github.com/ClickHouse/terraform-provider-clickhouse/releases/tag/v1.0.0).

### 2024 SOC 2 Type II report and updated ISO 27001 certificate[​](#2024-soc-2-type-ii-report-and-updated-iso-27001-certificate "Direct link to 2024 SOC 2 Type II report and updated ISO 27001 certificate")

We are proud to announce the availability of our 2024 SOC 2 Type II report and updated ISO 27001 certificate, both of which include our recently launched services on Azure as well as continued coverage of services in AWS and GCP.

Our SOC 2 Type II demonstrates our ongoing commitment to achieving security, availability, processing integrity and confidentiality of the services we provide to ClickHouse users. For more information, check out [SOC 2 - SOC for Service Organizations: Trust Services Criteria](https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services) issued by the American Institute of Certified Public Accountants (AICPA) and [What is ISO/IEC 27001](https://www.iso.org/standard/27001) from the International Standards Organization (ISO).

Please also check out our [Trust Center](https://trust.clickhouse.com/) for security and compliance documents and reports.

## August 15, 2024[​](#august-15-2024 "Direct link to August 15, 2024")

### Compute-compute separation is now in Private Preview for AWS[​](#compute-compute-separation-is-now-in-private-preview-for-aws "Direct link to Compute-compute separation is now in Private Preview for AWS")

For existing ClickHouse Cloud services, replicas handle both reads and writes, and there is no way to configure a certain replica to handle only one kind of operation. We have an upcoming new feature called Compute-compute separation that allows you to designate specific services as read-write or read-only services, allowing you to design the optimal compute configuration for your application to optimize cost and performance.