Security & privacy
AI summary
Find how Rencore Governance secures your data, where it is stored, how long it is kept, who at Rencore can see it, and which permissions each connector requires. Use this to answer security questions from your team.
How Rencore Governance secures your data and the permissions it requires to scan your Microsoft 365 tenantMicrosoft 365 tenantA Microsoft 365 tenant is the dedicated instance of Microsoft 365 that holds an organization's users, groups, data and settings.Read more. Use these pages to answer security and privacy questions from your security team or data protection officer: what data is stored and where, how long it is kept, who at Rencore can see it, and which permissions each connector needs.
For certificates, audit reports and security policies, visit the Rencore Trust Center. To see whether Rencore Governance is running normally, check status.rencore.com.
Start with
- Security overview This section gives details on our data access policies, security measurements, and provides a high-level overview of components used in our infrastructure.
- Rencore’s shared responsibility model This is an explanation of Rencore’s shared responsibility model, in line with requirements for ISO 27017.
- Data residency Rencore Governance stores all data in the Microsoft data center chosen by the customer upon creation of the Rencore Governance workspace.
- Required permissions Rencore Governance needs permissions to your Microsoft 365 tenant in order to operate and collect the data of the connectors that you would like to govern.
All pages in security & privacy
How Rencore keeps your data safe 2 pages
Security measures, the shared responsibility model and a short answer for your security team.
-
Rencore’s shared responsibility model
This is an explanation of Rencore’s shared responsibility model, in line with requirements for ISO 27017.
Security overview 7 pages
This section gives details on our data access policies, security measurements, and provides a high-level overview of components used in our infrastructure.
-
Where to find the Information Security Policy, the security report, the SOC 2 Type 2 report and the agreements for…
-
Who at Rencore can access production systems, what subcontractors can access, and how Rencore Governance gets access…
-
How customers connect to Rencore Governance, how its Azure infrastructure is secured, and the compliance standards it…
Show 4 pages more
-
Application security and development
How Rencore protects the application against SQL injection and the OWASP Top 10, and how security is built into…
-
Where customer data is stored, how it is encrypted, GDPR, how long data is kept after a subscription ends, and what…
-
The availability Rencore commits to for Rencore Governance and the regions where the service is offered.
-
The Azure components Rencore Governance runs on and the technology the solution is built with.
Certifications and availability 2 pages
Certifications, reports and the service availability Rencore commits to.
-
The certifications Rencore GmbH holds, the reports and questionnaires for Rencore Governance, and where to request…
-
The availability Rencore commits to for Rencore Governance, where to see the live service status, and how…
Data 7 pages
How Rencore Governance handles customer data, personally identifiable information, and data retention.
-
Rencore Governance collects and processes customer data, which means any information and metadata of the customer…
-
Personally identifiable information
Which personal data Rencore Governance stores, such as usernames and email addresses.
-
To operate and improve the service, Rencore Governance collects telemetry data that authorized support personnel can…
Show 4 pages more
-
Rencore Governance stores all data in the Microsoft data center chosen by the customer upon creation of the Rencore…
-
For the majority of entities, Rencore Governance retains only the details of the most current scan.
-
Microsoft hides user names in Microsoft 365 usage reports by default.
-
Which of your data authorized Rencore staff can see in the internal admin portal.
Permissions 10 pages
The permissions Rencore Governance requires across Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more, Power PlatformPower PlatformPower Platform is the Microsoft low-code platform where users build their own apps, flows, reports, agents and websites.Read more, and the other connectors.
-
Rencore Governance needs permissions to your Microsoft 365 tenant in order to operate and collect the data of the…
-
Withdraw the permissions you granted to Rencore Governance in Microsoft Entra.
-
The Power Platform application is the scanning service used for gathering data about Power Automate and Power Apps…
Power Apps
Power AutomateConsent
Show 4 pages more
-
Connect a Claude Enterprise organization to Rencore Governance with Anthropic API keys, so its users, projects…
Claude EnterpriseConsent -
Permissions Rencore Governance requires to connect with Microsoft Copilot Studio.
2 pages
Copilot StudioConsent -
The permissions Rencore Governance needs to scan your Azure subscriptions, and how to create the Entra ID app and give…
2 pages
AzureConsent
Frequently asked questions
Where does Rencore Governance store my data?
Rencore Governance stores all data in the Microsoft data center you selected when creating your workspace.
Can I revoke permissions I gave to Rencore Governance?
Yes. You can withdraw the permissions you granted to Rencore Governance in Microsoft Entra.
Is Rencore Governance secure?
Yes. It operates under a shared responsibility model aligned with ISO 27017 requirements.
What permissions does Rencore Governance require?
Rencore Governance needs permissions to your Microsoft 365 tenant to operate and collect data from the connectors you want to govern.
How long does Rencore Governance keep my data?
For the majority of entities, Rencore Governance retains only the details from the most current scan.