Data Protection

Learn how data is protected in Cubu.

Access to Data

Privileges Management

Cubu manages granular access control to features and data. This included access control to specific data tables and fields and permission to perform actions.

We currently do not comply with any specific standard.

Data Storage, Encryption, and Backup

Cubu stores data in 3 types of databases:

• SQL Server

• Cosmos DB (NoSQL database)

• BLOB storage (file storage)

Data Stored in Azure SQL Database

Organization configuration, settings, users, and access privileges are stored in the Azure SQL database.

Encryption

• Data stored in SQL Server is encrypted at rest (using TDE).

• Data stored in SQL Service is encrypted in motion.

Backups

• Azure SQL Database creates full weekly backups, differential backups every 12-24 hours, and transaction log backups every 10 minutes. The frequency of transaction log backups is based on the compute size and the amount of database activity.

• Backups are encrypted using an AES encryption algorithm

See:

Security Overview - Azure SQL Database & Azure SQL Managed Instance & Azure Synapse AnalyticsMicrosoftLearn

Automatic, geo-redundant backups - Azure SQL DatabaseMicrosoftLearn

Data Stored in Azure CosmosDB

Customer records, case records, logs, and other data are stored in Azure CosmosDB (NoSQL database).

Encryption

• Data stored in Azure Cosmos DB is encrypted at rest.

• Data stored in Azure Cosmos DB is encrypted in motion.

See:

Encryption at rest in Azure Cosmos DBMicrosoftLearn

Backups

• A full backup is taken every 4 hours

• Azure stores the last 2 backups at any point in time

• Backups are encrypted using an AES encryption algorithm

See:

• https://docs.microsoft.com/en-us/azure/cosmos-db/configure-periodic-backup-restore

Data Stored in Azure BLOB Storage

Encryption

• Data stored in Azure BLOB storage is encrypted at rest.

• Data stored in Azure BLOB storage is encrypted in motion.

Important: Media files (images and videos) uploaded by the organization for use in Portals, Kiosks, and Digital Signs are public, making them available to anyone who knows the file URL.

See:

• https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption

Backup

• Azure Cosmos DB automatically takes a full backup of the database every 4 hours and at any point in time, only the latest two backups are stored by default. If the default intervals aren't sufficient for your workloads, you can change the backup interval and the retention period from the Azure portal. You can change the backup configuration during or after the Azure Cosmos account is created. If the container or database is deleted, Azure Cosmos DB retains the existing snapshots of a given container or database for 30 days.

• Azure Cosmos DB stores these backups in Azure Blob storage, whereas the actual data resides locally within Azure Cosmos DB.

See:

Data protection overview - Azure StorageMicrosoftLearn

Data redundancy - Azure Storagedocsmsft

Exporting Data

Exporting and Sharing Personal Data

Exporting data from Cubu is not supported.

Copying Personal Data from Production to Other Environments

We do not copy personal data from our production environment.

Change Log

Configuration Changes

Every organizational configuration change (i.e., creating, updating, or deleting entities) is documented in Cubu’s change log.

Changes to Case Records

Changes to the case metadata (e.g., status, inbox) are documented in the Case States database.

Changes to the case fields and other properties are documented in the Case Change Log.

Each log entry contains the properties' old and new values, the time of change, and the change source (user, automation, customer action, etc.).

Changes to Customer Records and Other Data Tables

Changes to customers and other data tables s are documented in the Data Change Log.

Each log entry contains the properties' old and new values, the time of change, and the change source (user, automation, customer action, etc.).