---
title: "Security and Data Protection"
description: "Authentication and sessions, authorization, tenant isolation, what MDM stores and classifies, logging and redaction, audit events, and what the subscriber controls."
source: "https://help.rikaiso.com/public-cloud/2026.2/security-and-data-protection"
edition: "public-cloud"
editionLabel: "S/4HANA Public Cloud"
version: "2026.2"
latest: true
language: "en"
section: "Information for Administrators"
updated: "2026-11-05"
---

# Security and Data Protection

> Authentication and sessions, authorization, tenant isolation, what MDM stores and classifies, logging and redaction, audit events, and what the subscriber controls.

> **Draft brief for authors.** Replace with the final text; keep the structure.

**Page type:** Concept / Reference · **Audience:** Administrator, Security officer

**Contains**

- Authentication and session (identity provider, Sign Out); authorization (link `authorization-model`); tenant isolation.
- What MDM stores and how it is classified (staged business data; personal data: user IDs and e-mail addresses in the history).
- Logging and redaction; the audit log events; encryption and residency statement.
- What the subscriber controls (retention, roles, arrangement scope) and what the provider controls.

**Related information:** `security-overview`, `data-retention`, `data-stored`, `identity-mode`.

**Source in the product repository:** `docs/observability-and-audit-logging.md` §9–§14, §18–§21; `docs/identity-architecture.md`.