Security and Data Protection
Authentication and sessions, authorization, tenant isolation, what MDM stores and classifies, logging and redaction, audit events, and what the subscriber controls.
Draft brief for authors. Replace with the final text; keep the structure.
Page type: Concept / Reference · Audience: Administrator, Security officer
Contains
- Authentication and session (identity provider, Sign Out); authorization (link
authorization-model); tenant isolation. - What MDM stores and how it is classified (staged business data; personal data: user IDs and e-mail addresses in the history).
- Logging and redaction; the audit log events; encryption and residency statement.
- What the subscriber controls (retention, roles, arrangement scope) and what the provider controls.
Related information: security-overview, data-retention, data-stored, identity-mode.
Source in the product repository: docs/observability-and-audit-logging.md §9–§14, §18–§21; docs/identity-architecture.md.
Last updated: