Trust & Security
Enterprise controls without invented assurance claims.
This public overview describes the security and governance areas DataVolumeIQ is designed to support. Exact controls, hosting, residency, recovery targets and contractual commitments are confirmed for the purchased deployment and reflected in current procurement documentation.
Read-only SAP analysis
DataVolumeIQ does not modify SAP systems, configuration or data. Recommendations and plans do not execute SAP archiving, deletion or optimization jobs.
Technical metadata scope
Approved extracts use sizes, record counts, aggregated date ranges, observed access activity and growth statistics. SAP business-document contents, user information and PII are outside the intended analysis scope. Review and sanitize custom files and diagnostics before upload.
Identity & access
Role-based access and enterprise identity capabilities are available by plan. Deployment-specific SSO, MFA and provisioning details are confirmed during implementation.
Tenant-scoped authorization
The application is designed around tenant-scoped access and least-privilege authorization. Formal assurance should use the current security documentation for the deployed environment.
Auditability
Administrative activity, approvals, evidence and security-relevant actions can be surfaced through audit-oriented workflows and exports.
Retention, backup & offboarding
Retention, deletion, backup and customer offboarding requirements are handled as enterprise operating controls and documented for commercial deployments.
Vulnerability management
DataVolumeIQ includes SAP system applicability and remediation for customer systems and maintains separate platform security and vulnerability-management practices.
Procurement evidence
Enterprise buyers can request the current security questionnaire responses, data-processing information, subprocessor details and other available assurance materials.
Need a security or procurement package?
Use the request form and select your organization and plan context. The current available security, data-processing and subprocessor information can then be shared for evaluation.
Request security package