Chat now with support
Chat with Support

On Demand Global Settings Current - Security Guide

Azure Datacenter Security

Microsoft Azure datacenters have the highest possible physical security and are considered among the most secure and well protected datacenters in the world. They are subject to regular audits and certifications including Service Organization Controls (SOC) 1, SOC 2 and ISO/IEC 27001:2005. Relevant references with additional information about the Windows Azure datacenter security are listed below.

•
Azure Trust Center: https://azure.microsoft.com/en-us/support/trust-center/
•
Microsoft Trust Center Compliance: https://www.microsoft.com/en-us/TrustCenter/Compliance?service=Azure#Icons
•
Microsoft's submission to the Cloud Security Alliance STAR registry: https://cloudsecurityalliance.org/star/registry/
•
Whitepaper: Standard Response to Request for Information – Security and Privacy: http://www.microsoft.com/en-us/download/details.aspx?id=26647
•
Microsoft Global Datacenters: Security & Compliance: https://www.microsoft.com/en-us/cloud-platform/global-datacenters
•
Azure data-at-rest Encryption Best Practices: https://docs.microsoft.com/en-us/azure/security/azure-security-data-encryption-best-practices

AWS Data Center Security

Amazon Web Services (AWS) data centers have the highest possible physical security and are considered among the most secure and well protected data centers in the world. They are subject to regular audits and certifications including SOC 2 and ISO/IEC 27001.

Relevant references with additional information about the AWS data center security are listed below.

•
AWS Security and Infrastructure: https://aws.amazon.com/products/security/
•
AWS Compliance: https://aws.amazon.com/compliance/

Overview of Data Handled by On Demand Core

This section describes how On Demand core services handle data.

Data Handled by Core

Data Handled by Core
•
Managed Data Types
•
Subscription Services
Managed Data Types

On Demand Core manages the following types of customer data. By default, the data is persisted in On Demand Core.

•
Microsoft Entra Tenant Name
•
Microsoft Entra Subscription Active Directory Object Id (GUID)
•
Microsoft Entra Administration Consent Token
•
Microsoft Entra User Object Identifiers (GUID)
•
Microsoft Entra Group Object Identifiers (GUID)
•
Audit log of On Demand Core user activities, including user name in email form (name@domain.com)
Subscription Services

The Subscription Service stores customer contact information and can process credit card transactions associated with subscription purchases and renewals.

•
Cybersource is the credit card payment gateway. Cybersource receives the necessary information required for purchase transactions. Required fields are as follows:
•
credit card number
•
expiration date
•
name
•
address
•
email address
•
Tradesphere is the trade compliance system. Tradesphere receives name, address, and country information.
•
Salesforce is the subscription billing system. Salesforce receives all the product details along with the customer billing and shipping information that is required for invoicing. In addition, customer quotes are quoted in Salesforce using the account, contact, and product details housed in Salesforce. Orders are billed and invoiced through Salesforce billing. Details of a new subscription, subscription amendment, and subscription renewal orders are passed to the On Demand platform for the purposes of provisioning tenant environments on the On Demand platform.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating