Fundamentals Security Policy

Fundamentals Customers often have a questions about Fundamentals' security, especially when they have security audits going on with their outside consultants.  

Tangicloud is pleased to present this information to help with your audit:

• SOC Reports – SOC compliance for Business Central is a service managed by Microsoft.  Here is a quote from their website:  “Business Central is a cloud service with a global reach and scale running on one of the world's largest hyper-scale infrastructures, Microsoft Azure, with data centers in regions all over the world. Running a cloud service also imposes the need to conform to certain standards in security and compliance, so from a service perspective, Business Central lives up to the strict requirements in several ISO and industry specific certifications..” 

SOC1 & 2 downloads are available from the Microsoft Service Center for your use today.  If you or your auditors would like more report access, please look at their service trust portal.  You will need to be prepared to login with a Microsoft login and accept an NDA to get more access.  This allows you or the auditors to download the latest compliance reports as Microsoft publishes them.

Our software is managed by Microsoft on their servers on the Business Central platform. 

• Data recovery for Fundamentals customers – All Fundamentals features are Microsoft-validated ISV extensions applied to your base Business Central instance.  Here is a quote from Microsoft about Business Continuity and disaster recovery: “Business Central online architecture and administration capabilities ensure uninterrupted access to your critical business data and processes. Automatic backups, built-in redundancy, and high availability protect your data and keep it accessible during and after a disruptive event. Business Central has proactive BCDR (Business Continuity & Disaster Recovery) strategies, processes, and technologies that minimize downtime and preserve important assets.

Business Central uses the Azure cloud computing platform for its robust business continuity options that protect your critical workloads against disruptions. Azure's global network of regions keeps your data close to your geographic location and provides options for recovering data in another region. Your data is available despite regional outages or disruptions. To learn more about Azure regions, go to Azure Geographies.”

User Access rights – While you can set up user access rights yourself if you’re unsure about the best way to accomplish this, We can help define requirements and do the setups for you for 2 to 4 hours service. There are many ways to refine access, including restricting users to data (e.g. limit PIs to their grants/programs only).

One thing we try to make clear is that Fundamentals, as a product reviewed by Microsoft before publishing, meets Microsoft standards for publishing.  We believe that our product is well protected by the Microsoft environment to a world-class level of security and data management.  If you need any specific questions answered, please create a support ticket with us at helpdesk@tangicloud.com.