Advanced Cloud Security Documentation
Index

Privacy Policy

This document describes how Advanced Cloud Security handles data and privacy.

Overview

Advanced Cloud Security (ACS) is designed with privacy in mind. This policy explains what data ACS accesses, processes, and stores.

Data Processing

Data ACS Accesses

ACS accesses Business Central data to:

Data Type Purpose
User information Apply security based on user identity
Table metadata Generate field and page extensions
Page metadata Configure field and action controls
Security groups Determine group-based security
Permission sets Determine permission-based security

Data ACS Stores

ACS stores configuration data within your Business Central environment:

Data Type Description
Security features Your defined security rules
Assignments User/group/permission set assignments
Compliance configuration Tracking and approval settings
Compliance log Change history for tracked fields
User filters Filter values for data security

Data Location

All ACS data is stored:

  • Within your Business Central environment
  • In your Business Central database
  • Subject to your Business Central data residency

ACS does not transfer your business data outside your Business Central environment.

License Verification

What Is Transmitted

For license verification, ACS may transmit:

  • Tenant identifier
  • License key
  • Product version
  • Verification timestamp

What Is NOT Transmitted

ACS does not transmit:

  • Business data
  • User personal information
  • Security configuration details
  • Compliance log contents

Data Collection

Usage Analytics

ACS may collect anonymous usage analytics:

  • Feature usage patterns
  • Error reports
  • Performance metrics

This data is:

  • Anonymized
  • Aggregated
  • Used for product improvement

Opting Out

Contact support if you have concerns about analytics collection.

Compliance Log Data

What Is Logged

The compliance module logs:

Information Purpose
Changed field name Audit trail
Old value Record of change
New value Record of change
User ID Accountability
Timestamp When change occurred
Approval status Workflow tracking

Data Retention

Compliance log retention:

  • Stored indefinitely by default
  • Subject to your data retention policies
  • You control retention period
  • Standard BC data management applies

Sensitive Data

Considerations for sensitive data:

  • Be aware of what fields you track
  • Compliance log stores field values
  • Consider data classification
  • Apply appropriate access controls

Third-Party Services

External Services

ACS uses Azure Application Insights for telemetry and diagnostics:

  • Anonymized usage data and error reports are sent to Azure Application Insights
  • This helps improve product quality and diagnose issues
  • No business data or security configuration details are transmitted

ACS does not:

  • Share business data with third parties
  • Store business data outside your BC environment
  • Transmit security configuration or compliance log contents externally

Microsoft Services

ACS operates within:

  • Microsoft Business Central platform
  • Microsoft Azure infrastructure
  • Microsoft data centers
  • Subject to Microsoft's policies

User Rights

Data Access

You maintain full access to:

  • All ACS configuration data
  • Compliance log records
  • User filter values
  • Security feature definitions

Data Portability

ACS data can be:

  • Exported using BC tools
  • Backed up with BC backups
  • Migrated with BC migrations

Data Deletion

You can delete:

  • Individual compliance log entries
  • Security feature configurations
  • User assignments
  • All ACS data by uninstalling

Security Measures

Data Protection

ACS data is protected by:

  • Business Central security
  • Your BC authentication
  • Role-based access control
  • BC encryption (if configured)

Access Control

ACS configuration access controlled by:

  • ACS EFQ permission set
  • Standard BC permissions
  • Your security policies

Compliance Considerations

Regulatory Compliance

ACS supports compliance with:

  • Audit requirements
  • Change tracking regulations
  • Access control mandates
  • Segregation of duties

Your Responsibilities

You are responsible for:

  • Appropriate configuration
  • Data retention policies
  • Access control decisions
  • Compliance with regulations

Changes to This Policy

Notification

Policy changes will be:

  • Communicated through support channels
  • Updated in documentation
  • Effective after notification

Version

This policy version: 10.0 Last updated: See documentation release notes

Contact

Privacy Questions

For privacy-related questions:

Data Requests

For data-related requests:

  • Contact support
  • Specify the request type
  • Allow reasonable processing time