Security
How RIKAISO Master Data runs, where your data lives and who can reach it.
Hosting
RIKAISO Master Data runs on SAP BTP in the Cloud Foundry environment. Each data centre has its own subaccount, so a customer's tenant, its database and its logs stay in the data centre the customer chose.
Infrastructure, patching and physical security are provided by the platform; RIKAISO operates the application, its configuration and its monitoring.
- Platform
- SAP BTP, Cloud Foundry environment
- Data centres
- One subaccount per data centre
- Tenancy
- Multitenant, one isolated tenant per customer
Data
Your master data stays in S/4HANA. RIKAISO Master Data stores the changes you prepare, the review decisions and the log of what was posted, in the data centre of your tenant.
Data is encrypted in transit and at rest. When a subscription ends, the tenant's data is deleted after the agreed retention period.
- Stored by RIKAISO Master Data
- Prepared changes, reviews, change log, user settings
- Stays in S/4HANA
- Your master data and every other business record
- Residency
- The data centre you choose
Access
People sign in through your own identity provider with single sign-on. Roles decide who may prepare changes, who may review them and who may post them to S/4HANA.
Every sign-in, review and posting is written to an audit log that administrators can read and export.
- Sign-in
- Single sign-on through your identity provider
- Roles
- Requester, reviewer, administrator
- Audit log
- Sign-ins, reviews and postings, exportable
AI tools
The MCP tools act with the permissions of the user who connects them: an AI tool can prepare only what that user may prepare, and it cannot approve its own changes.
Customer data is not used to train models. Every change an AI tool prepares is reviewed by a person before it is uploaded to S/4HANA.
Compliance
Certifications and audit reports are in preparation. The list below shows their status; ask us for the current state of each.
- SOC 2 Type II
- In preparation
- ISO/IEC 27001
- In preparation
- Data processing agreement
- In preparation
- Penetration test summary
- In preparation
Contact
Questions about security, a questionnaire from your procurement team or a vulnerability to report: write to us through the contact page and we will reply within two business days.