Product area
Security & privacy
How Rencore Governance keeps your data safe: security, certifications, where data is stored, how long it is kept and privacy.
35 pages · All tags
Reference 21
- Reference › Security & privacy › DataAdmin portal access
Which customer data authorized Rencore staff can see in the internal admin portal they use to operate Rencore Governance, and why.
- Reference › Security & privacy › Security overviewApplication security and development
How Rencore protects the application against SQL injection and the OWASP Top 10, and how security is built into development and testing.
- Reference › Security & privacy › Security overviewAvailability
The availability Rencore commits to for Rencore Governance and the regions where the service is offered.
- Reference › Security & privacyAvailability and status
The availability Rencore commits to for Rencore Governance, where to see the live service status, and how configuration is backed up.
- Reference › Security & privacyCertifications and compliance
The certifications Rencore GmbH holds, the reports and questionnaires for Rencore Governance, and where to request them on the Rencore Trust Center.
- Reference › Security & privacy › DataCustomer data
What customer data Rencore Governance collects and processes: the information and metadata in Microsoft 365 and the other connectors you connect.
- Reference › Security & privacyData
How Rencore Governance handles customer data, personally identifiable information, and data retention.
- Reference › Security & privacy › Security overviewData privacy
Where customer data is stored, how it is encrypted, GDPR, how long data is kept after a subscription ends, and what data leaves your tenant.
- Reference › Security & privacy › DataData residency
Rencore Governance stores all data in the Microsoft data center chosen by the customer upon creation of the Rencore Governance workspace.
- Reference › Security & privacy › DataData retention
Rencore Governance keeps the details of the latest scan only, plus totals such as object and violation counts over time to show trends.
- Reference › Security & privacy › Security overviewInformation security policy
Where to find the Information Security Policy, the security report, the SOC 2 Type 2 report and the agreements for Rencore Governance.
- Reference › Security & privacy › Security overviewInfrastructure
How customers connect to Rencore Governance, how its Azure infrastructure is secured, and the compliance standards it follows.
- Reference › Security & privacyIs Rencore Governance secure?
How Rencore Governance meets enterprise and government security requirements, including the ISO 27001 and ISO 27017 certifications Rencore holds.
- Reference › Security & privacy › DataPersonally identifiable information
The personal data Rencore Governance stores, such as user names, email addresses and URLs, and how the collected data can be removed.
- Reference › Security & privacyRencore’s shared responsibility model
Rencore's shared responsibility model under ISO 27017: which security tasks Rencore handles for Rencore Governance and which stay with you.
- Reference › Security & privacy › Security overviewRoles and access control
Who at Rencore can access production systems, what subcontractors can access, and how Rencore Governance gets access to your tenant.
- ReferenceSecurity & privacy
How Rencore Governance secures your data and the permissions it requires to scan your Microsoft 365 tenant.
- Reference › Security & privacySecurity overview
An overview of security in Rencore Governance: who can access data, the security measures in place and the main parts of the infrastructure.
- Reference › Security & privacy › Security overviewTechnical overview
The Azure components Rencore Governance runs on and the technology the solution is built with.
- Reference › Security & privacy › DataTelemetry data
To operate and improve the service, Rencore Governance collects telemetry data that authorized support personnel can access.
- Reference › Security & privacy › DataUn-anonymize user data
Microsoft hides user names in Microsoft 365 usage reports by default. Which Rencore Governance objects this affects and how to show the names again.
FAQ 5
- FAQDo you support GCC & GCC high?
No, Rencore Governance does not currently support GCC or GCC high.
- FAQHow is my data protected?
Your data in Rencore Governance is encrypted at rest in Azure and in transit with TLS 1.3. Only the Rencore Product Operations team can access the cloud…
- FAQIs Rencore Governance compliant with GDPR?
Broadly, yes. Rencore runs a data protection program and reviews it continually to meet the requirements of the GDPR, as detailed in the Governance Terms of…
- FAQWhat is the retention time of that data?
Rencore Governance retains the collected data during your usage of our product, as it is required to build the dashboards, checks, and reports. When your…
- FAQWhere is my data stored?
By default, data is stored in Azure Storage Accounts in one of the available datacenters that can be chosen upon Workspace creation.
Glossary 9
- GlossaryAdmin portal
The admin portal is the internal back end that authorized Rencore personnel use to operate Rencore Governance. It shows metadata only and has no insight into…
- GlossaryAnonymized user data
Anonymized user data is user information that Microsoft 365 replaces with de- identified names in its usage reports. Rencore Governance shows these anonymized…
- GlossaryData center
The data center is the Microsoft Azure region where Rencore Governance stores all data of a Workspace. You choose it when you create the Workspace, and all…
- GlossaryData Processing Agreement
The Data Processing Agreement for Rencore Governance sets out how Rencore processes personal data on your behalf, as Article 28 of the GDPR requires. It is…
- GlossaryDirectory role
A directory role is a Microsoft Entra admin role, such as Global Administrator or Teams Administrator, that grants a set of permissions across the tenant.
- GlossaryMultifactor authentication
Multifactor authentication asks a user for a second form of verification, such as a code on their phone or a fingerprint, in addition to the password.
- GlossaryRedirect rule
A redirect rule forwards or redirects the incoming email of a mailbox to another recipient. It can send company mail outside the organization.
- GlossaryTelemetry data
Telemetry data is the usage data Rencore Governance collects to operate and improve the service. It never includes personal or customer data from your tenant.
- GlossaryTrust Center
The Rencore Trust Center, at trust.rencore.com, is where Rencore publishes its certifications, security reports, policies and sub-processors. Some documents…