Mobile device security / encryption

[tom_garvin]

As you might imagine, within a Fortune 500 corporation, meeting security requirements is quite a challenge. Even more challenging is obtaining approval by all the gatekeepers, none of which are particularly motivated to be helpful.

Since PowerApps is such a new product, we are having difficulty with these very gatekeepers, as our project is the very first one. They are heavy users of O365 and adopting Power BI at a fast rate.

It is my understanding that ALL communications between the PowerApp client (player?) are over HTTPS, and therefore meet the "encrypted in motion" standard. As our backend will be Azure SQL DB, TDE or similar can be applied, hopefully satisfying the "at rest" standard.

I'm aware of PowerApps DLP settings. But I do NOT have a definitive white paper or other document I can provide to the IT Naysayers. Is there such a document? The online product pages are full of assurances, but that's not sufficient.

[sarafankit]

Will any of the following compliance certifications work to satisfy your IT team?

https://www.microsoft.com/en-us/trustcenter/compliance/complianceofferings?product=Power_Apps

Or the security practices listed on the Trust Center?

https://www.microsoft.com/en-us/TrustCenter/CloudServices/business-application-platform/security

[tom_garvin · Accepted solution]

Yes, the first link to the Compliance Center should be sufficient.

It looks to me as though PowerApps and Flow align very well with Power BI in terms of security.

If true, and the organization continues to adopt Power BI, then I think it will set a great precedent.

As always, paranoia about "data leakage" via mobile devices is both (1) annoying; and (2) well founded!