Microsoft business software for medium-sized companies.

As a Microsoft partner we have to refer to the precautions of Microsoft at this point.
Microsoft guarantees the use of the cloud in compliance with the high German security and data protection standards. In this way, the Microsoft cloud fulfills national (e.g. C5 certification of the BSI requirements catalog), European (e.g. EU-DSGVO), international and industry-specific compliance standards, laws and guidelines that apply to cloud services in terms of data security and data protection.

Further information from Microsoft can be found here: https://docs.microsoft.com/de-de/microsoft-365/compliance/

Since fall 2019, Microsoft has also had German data centers so that your data can be stored on “German soil”. You decide on the location of the data center.

According to Art. 24 EU-DSGVO, the customer is “master of the data” and responsible. In particular, this also means that the customer is responsible for safeguarding the rights of those affected (Chapter 3 EU-DSGVO).

anaptis is a commissioned processor and thus processes your data exclusively on instruction and for the purposes regulated in the contract for commissioned processing. In concrete terms, this means that under no circumstances will data be sold or passed on to third parties. An exception to this is the passing on of data to any subcontractors, which is regulated within the framework of the contract for order processing with our customers.

In principle, anaptis fulfils all requirements of the EU data protection basic regulation and is, as an organisation and within the scope of its products, data protection compliant according to the EU-DSGVO.

Microsoft collects data about cyber attacks and uses it to continually improve the cloud. This includes Microsoft’s Digital Crimes Unit (DCU), where engineers and lawyers work directly with investigators from around the world to apprehend large-scale cyber attacks and criminals. Here, more than 600 million security risks are captured, stored and analyzed every day to increase logical security in the digital world. Information and insights are constantly being gathered from different workloads, apps and platforms, combined with each other and evaluated in an intelligent way. This allows us to identify and resolve problems early on, before they impact the business of our cloud customers, and to ensure the availability of apps and data across the board.

In addition, we recommend the use of two-factor authentication, which is already established through the use of online banking solutions and uses a password and another device (telephone, smartphone, tablet, etc.) for security.

Microsoft stores all data redundantly across multiple systems and physically separated locations. This means you don’t have to create or manage your own backups. However, you can create a data backup from the system (here: Microsoft Dynamics 365 Business Central) and store it locally at any time

Should the business relationship be terminated, the customer’s authorized persons can request the release of the data in a machine-readable format. The data will then be irretrievably deleted after the contractually defined period of time.

Microsoft has this competence confirmed by third parties on a regular basis – for example, current test reports on ISO standards such as ISO 27001 are regularly disclosed. Especially in Germany, the promise is regularly checked by German data trustees.