A dedicated instance per customer
You run in your own dedicated instance. Your data shares neither database nor application environment with other customers.
Security
Security at Grunddata
Your business data runs in its own instance, signs in with your own identity and follows the permissions you set.
Dedicated instanceEncrypted at restMicrosoft Entra ID
01 Your data
Encrypted storage and backups
All data is stored on fully encrypted disks, and backups are encrypted as well. Your data is protected at rest.
Bring your own key
We are adding support for BYOK, where encryption is tied to a key that you own and manage yourselves. This gives you full control over access to your data, including the ability to revoke the key.
Coming02 Access
Sign in with your own identity
Users sign in with your organisation’s Microsoft Entra ID, so your own sign-in policies, such as MFA and conditional access, apply in Grunddata as well. There are no separate Grunddata passwords.
Permissions you control
Access is governed by roles and fine-grained permissions, so each user sees and does only what they should. Optionally, users and groups can be synchronised automatically from your Entra ID, so access is updated when someone changes role or leaves.
No stored secrets
Our services communicate without passwords or keys stored in code or configuration, so there are no stored credentials to leak.
IP allowlisting
Access to your instance can be limited to the networks you have approved. Requests from other addresses are rejected before they reach the system.