Data minimization
Only data needed for scans, dashboards, reports and licensing is processed.
Security
Security
Security for BCSentinel Business Central Data Health Management.
Screenshot/mockup for AppSource preparation.
security_privacy_principles_title
security_privacy_principles_lead
Consent first
Data Processing Consent is required before registration and scans.
Cloud compatible
Business Central Cloud does not require direct database access.
security_tokens_title
security_tokens_lead
API tokens
API tokens are stored in Business Central IsolatedStorage.
Embed tokens
Analytics embeds use short-lived purpose-bound tokens.
Report links
Report share links are time-limited and separate from API tokens.
security_tenant_title
security_tenant_lead
Tenant separation
Requests and data are scoped to the authenticated tenant.
Role concept
Admin and partner access use separated authentication flows.
Transport security
Production deployment should use HTTPS/TLS behind the reverse proxy.
security_audit_title
security_audit_lead
Admin audit log
Admin changes are logged where audit logging is available.
Operational monitoring
Health and readiness endpoints support operations checks.
Backup and restore
Production operations should follow the documented backup and restore runbook.
security_disclosure_title
security_disclosure_lead
Report issues
Security findings can be reported through the contact channel.
No exaggerated claims
This page avoids claims of certification unless formally achieved.
Continuous improvement
Security documentation will evolve with production readiness.