Data Processing Agreement(DPA)
Customer = Controller
Customer determines:
- What data is stored
- Why it is stored
- How it is used
Security Measures
- Role-based access controls
- Encryption in transit
- Azure security controls
- Restricted administrative access
- Logging and monitoring
- Backup procedures