Privacy Policy
This page summarizes how Certify for Business Central handles data. The authoritative privacy statement is published by the publisher.
Authoritative Policy
The full privacy policy is available at:
https://www.hougaard.com/privacy-policy/
Always refer to the published policy for the definitive and current terms.
Data the App Handles
To do its job, the app processes data from Certify and stores it in your Business Central environment, including:
- Expense reports and lines — dates, amounts, currencies, merchants, categories, business purpose/reason, tax amounts, and dimension codes.
- Employee identifying data — names, email, employee ID, and department on reports and lines.
- Corporate card references — card name and the last digits of the card.
- Receipt references — receipt IDs/links as provided by Certify.
Some of these fields are classified as organization-identifiable information within the app's data model.
Where Data Is Stored
- Imported expense data is stored in tables within your Business Central environment, under your organization's control and tenancy.
- API credentials (key and secret) are stored on the Certify Setup card. Restrict access to this card.
Data Transmission
- The app communicates with the Certify API over HTTPS.
- Authentication uses your API key and secret, sent as request headers.
- Category G/L mappings are written back to Certify through the API.
Telemetry
The app includes an Application Insights key for operational telemetry. Telemetry is used to monitor the health and usage of the app. Refer to the published privacy policy for details on what is collected.
Your Responsibilities
- Protect the API credentials and restrict access to the Setup card.
- Apply appropriate Business Central permissions so only authorized users see expense and employee data.
- Follow your organization's data-retention and privacy obligations for the imported data.