General storage
In general, all survey responses are stored on Microsoft Azure servers located in Frankfurt, Germany. Microsoft Azure maintains high security standards, complies with internationally recognized certifications such as ISO 27001 and SOC 2, and implements extensive physical security controls to safeguard its data centers.
Some sensing data is not sent to this general storage but is instead transmitted directly to a cloud provider or to servers owned by the customer.
Microsoft Azure Compliance
Microsoft Azure complies with many internationally recognized certifications (see https://learn.microsoft.com/en-us/azure/compliance/). For example:
- ISO 27017
- SOC 1
- SOC 2
- SOC 3
- ISO 20000-1
- ISO 22301
- ISO 27001
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 9001
- WCAG
Physical security
Physical security: Microsoft designs, builds, and operates datacenters in a way that strictly controls physical access to the areas where data is stored. Microsoft understands the importance of protecting data, and is committed to helping secure the datacenters that contain data. They have an entire division devoted to designing, building, and operating the physical facilities supporting Azure. This team is invested in maintaining state-of-the-art physical security. More information can be found here: https://learn.microsoft.com/en-us/azure/security/fundamentals/physical-security
Encryption at rest
The data on our servers is encrypted at rest with AES 256-bit encryption via Azure Storage encryption (service managed keys).
Backup and business continuity
Our databases are backed up daily (maximum retainment of one month).
We use zone-redundant HA architecture (https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-high-availability#zone-redundant-ha-architecture ) which ensures a standby replica server in another availability zone. If there is a failover, the standby replica is activated. Additionally, our servers are back upped daily and we regularly test our procedure for service restoration.
Cloud storage for sensing data
We don’t save most sensor information and recordings on our own servers to improve the privacy for participants.
Direct upload for media files and sensing data
For most sensing data or media file uploads data is directly sent to your preferred cloud provider, or even directly to your universities servers using SFTP.
What data is send to cloud storage
The following data is send to cloud storage instead of the general Microsoft Azure storage:
- All data from sensing full
- The following data from sensing lite:
- Audio recordings
- Video recordings
- Pictures that are uploaded
Storing answer data on your own servers
It is possible to store data on your own servers. Doing so requires an additional development cost as m-Path will need to work closely together with your own IT personal. Feel free to contact us at contact@m-path.io if you are interested in this.