Security & Privacy

Subscription Management takes on the responsibility of connecting your application with your end-users. We've taken a number of steps to ensure the confidentiality of your data whilst it's entrusted with us.

We work in close collaboration with our Security Team to ensure our design and architecture meets and exceeds industry standards, with regular penetration tests validating our controls.

Keeping your Stripe account safe

Subscription Management uses your Stripe Secret Key to authenticate to your Stripe Account and leverage this connection to facilitate operations performed within Subscription Management.

This key provides full access to your Stripe account and can broker access to your customer data as well as any billing transactions. For these reasons, we recommend you follow the below safeguards:

1. Keep your Stripe Secret Key in a robust location such as Azure's Key Vault)
2. Mark any methods that work with Secrets as NonDebuggable
3. Mark any object instances that work with Secrets as accessible only within the application. Single instance codeunits may be used only if its methods are marked with internal access modifier - the internalsVisibleTo setting declared within the applications JSON file should be blank to disallow ANY apps from accessing it.

Subscription Management keeps your Stripe Secret Key strongly encrypted through the use of server-side encryption mechanisms, leveraging TLS 1.2 to ensure robust, encrypted transport to external parties.

Keeping your and your customer data safe

Subscription Management collects and stores information from you and your customer. We classify this information into the categories listed below and depending on the category, we apply different storage and usage requirements:

Category	Description	Entered	Stored	Used
Publisher's Auth Info	Publisher's Stripe API keys	By publisher using Subscription Management API	Encrypted within Subscription Management	By Subscription Management to authorize your app with your Stripe account
Publisher's Info	Publisher's Stripe ID, name, support email, Stripe TAX ID, link to TOC and privacy policy	By publisher using Stripe UI	Public within Subscription Management	By Subscription Management to operate
Customer's User Auth Info	Customer's user SIDs	By user using Subscription Management Assisted Setup	Public within Subscription Management	By Subscription Management to authorize customer access to customer's account information
Customer's User Info	Customer's user email, first/last name	By user using Subscription Management Assisted Setup	Private within Publisher's Stripe Account	By publisher for service availability notifications
Customer's Auth Info	Customer's ID	By user using Subscription Management Assisted Setup	Public within Subscription Management	By Subscription Management to authorize customer access to customer's account information
Customer's Environment Info	Customer's tenant ID and environment identifier	By user using Subscription Management Assisted Setup	Private within Publisher's Stripe Account	By Subscription Management to operate
Customer's Billing Info	Customer's billing address, email and payment method	By user using Subscription Management Assisted Setup and Stripe Elements only for paid subscribers	Private within Publisher's Stripe Account	By Stripe to billing purposes

Please check a complete Terms and Conditions and Privacy Policy for a more details.