---
id: topic/dev-itpro/security-privacy-and-compliance
type: topic
title: Security, privacy, and compliance
summary: Security, privacy, and compliance in Business Central covers protecting data and controlling access, how the online service is built and run, auditing of data changes and admin events, and privacy and compliance resources. It answers questions about security controls, reliability, audit trails, certifications, and data residency.
tier: official
language: en
review:
  state: reviewed
  by: opus
  at: "2026-10-07T02:16:33.251Z"
  flags: []
generated:
  at: "2026-10-08T00:04:31.553Z"
  pipeline: 0.2.0
  prompts:
    hub-topic: 1
  input_hash: 61c6b576924ff4c045e496dfb77a4f65d9cc9ba0447479839fcc9c5e3954ff71
evidence:
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/across-log-changes
    title: Auditing changes
    date: "2026-06-17"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/auditing/audit-events-in-purview
    title: Auditing events in Microsoft Purview
    date: "2026-07-07"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/auditing/auditing-overview
    title: Business Central Auditing Overview
    date: "2026-10-06"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/compliance/compliance-overview
    title: Compliance Overview
    date: "2024-06-18"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/deployment/configure-ssl-web-client-connection
    title: Configuring SSL to Secure the Web Client Connection
    date: "2021-04-01"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/ui-how-users-permissions
    title: Create users according to licenses
    date: "2026-07-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/transparent-data-encryption
    title: Data Encryption at Rest, Transparent Data Encryption, and BitLocker
    date: "2025-06-20"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Setting-Database-Owner-and-Security-Administration-Permissions
    title: Granting permissions to manage databases
    date: "2024-10-26"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/enhancing-server-instance-security
    title: Hardening Business Central Server Security
    date: "2024-09-09"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-application
    title: Layered security model in Business Central
    date: "2025-11-19"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/multifactor-authentication
    title: Multifactor authentication (MFA) for Business Central
    date: "2023-11-13"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/developer/devenv-permissions-on-database-objects
    title: Permissions on Objects
    date: "2025-06-02"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/PrivacyFAQ
    title: Privacy FAQ
    date: "2024-08-12"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-auditing
    title: Security auditing in Business Central
    date: "2024-10-21"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-faq
    title: Security FAQ for Business Central
    date: "2025-12-11"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-online
    title: Security in Business Central
    date: "2026-01-14"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-onpremises
    title: Security in Business Central (on-premises)
    date: "2021-04-01"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-scenarios-guide
    title: Security scenarios Guide by Persona
    date: "2025-12-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-users
    title: Security Tips for Business Users
    date: "2025-12-04"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/service-operations
    title: Service operations
    date: "2024-02-22"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/service-overview
    title: Service overview for Business Central online
    date: "2024-12-02"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/service-scalability
    title: Service scalability for Business Central online
    date: "2024-02-22"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-service-tags
    title: Use Azure security service tags
    date: "2025-07-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/deployment/implement-security-certificates-production-environment
    title: Using Security Certificates with Business Central on-premises
    date: "2024-12-20"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Security-Filters
    title: Using Security Filters
    date: "2025-10-14"
    commit: null
    t: null
    quote: null
links:
  learn:
    - https://learn.microsoft.com/dynamics365/business-central/compliance/compliance-overview
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/PrivacyFAQ
  objects:
    - object/page/119
    - object/page/592
    - object/page/593
    - object/page/594
    - object/page/595
    - object/page/710
    - object/page/774
    - object/page/1366
    - object/page/1367
    - object/page/1368
    - object/page/1369
    - object/page/6300
    - object/page/6301
    - object/page/6302
    - object/page/8930
    - object/page/9061
    - object/page/9062
    - object/page/9069
    - object/page/9800
    - object/page/9807
    - object/page/9808
    - object/page/9816
    - object/page/9818
    - object/page/9874
  features: []
  topics:
    - topic/dev-itpro/security-privacy-and-compliance/security
    - topic/dev-itpro/security-privacy-and-compliance/service-overview
    - topic/dev-itpro/security-privacy-and-compliance/auditing
  localizations: []
  videos: []
  posts: []
  guidelines: []
learn_toc_path:
  - Security, privacy, and compliance
toc_file: dev-itpro/TOC.md
parent: null
children:
  - topic/dev-itpro/security-privacy-and-compliance/security
  - topic/dev-itpro/security-privacy-and-compliance/service-overview
  - topic/dev-itpro/security-privacy-and-compliance/auditing
coverage:
  learn: 25
  code: 24
  video: 0
  blog: 0
  guideline: 0
bc_forms:
  - 119
  - 592
  - 593
  - 594
  - 595
  - 710
  - 774
  - 1366
  - 1367
  - 1368
  - 1369
  - 6300
  - 6301
  - 6302
  - 8930
  - 9061
  - 9062
  - 9069
  - 9173
  - 9800
  - 9807
  - 9808
  - 9816
  - 9818
  - 9830
  - 9831
  - 9838
  - 9874
member_hash: c75cb8e1ad18a07e055bbc726827d8f6a4b3991f797a51fc73305c27e2f9b775
narrative: generated
---

# Security, privacy, and compliance

> Security, privacy, and compliance in Business Central covers protecting data and controlling access, how the online service is built and run, auditing of data changes and admin events, and privacy and compliance resources. It answers questions about security controls, reliability, audit trails, certifications, and data residency.

Path: Security, privacy, and compliance · tier official · system none · narrative reviewed (checked by Opus)

## Overview

This section groups everything about keeping Business Central data safe and meeting regulatory needs. It has three subtopics: Security, Service overview, and Auditing. Two pages sit at the top level: a Compliance Overview index and a Privacy FAQ.

Security covers online tenant security, multifactor authentication, encryption, network restrictions with service tags, record-level security filters, and persona-based guidance for online and on-premises deployments. Service overview explains the Azure-based multitenant architecture, availability and backup, service operations, incident handling, and scalability. Auditing covers tracking data changes, auditing security-related tables, and reviewing events sent to Microsoft Purview.

Start with the Compliance Overview for an index of compliance topics such as certifications and regulatory requirements. Use the Privacy FAQ for links on personal data, regional availability, and data residency. Go to the subtopics for the technical detail.

## Key points

- Compliance Overview indexes application compliance, service compliance, certifications, and regulatory requirements.
- Privacy FAQ links to resources on privacy, personal data, international availability, and data residency, including the trust center and EU data boundary.
- Security (16 pages) covers tenant security, multifactor authentication, encryption, service tags for network restrictions, and record-level security filters.
- Security guidance applies to both online and on-premises deployments and includes persona-based guidance.
- Service overview (3 pages) describes Azure multitenant architecture, availability, backup, incident handling, updates, and scalability.
- Auditing (4 pages) shows how to track data changes, audit security-related tables, and see who changed what and when.
- Administrative events can be reviewed in Microsoft Purview.

## Subtopics

- [Security](security-privacy-and-compliance/security.md) (16 pages)
- [Service overview](security-privacy-and-compliance/service-overview.md) (3 pages)
- [Auditing](security-privacy-and-compliance/auditing.md) (4 pages)

## More Learn pages

- [Compliance Overview](https://learn.microsoft.com/dynamics365/business-central/compliance/compliance-overview): Overview of how Business Central functionality is built on a platform that makes it easy for customers to comply with compliance and regulatory legislation.
- [Privacy FAQ](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/PrivacyFAQ): Find useful links and other answers to frequently asked questions about privacy in Dynamics 365 Business Central.

## Business Central pages and reports

The pages, reports and queries this hub's Learn pages name (ms.search.form, API reference), joined to the code by exact object id (data/index/docs-objects.json); a page shows the table it runs on.

- [Page 119 "User Setup"](../../objects/page/119.md) · on [Table 91 "User Setup"](../../objects/table/91.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 592 "Change Log Setup"](../../objects/page/592.md) · on [Table 402 "Change Log Setup"](../../objects/table/402.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 593 "Change Log Setup (Table) List"](../../objects/page/593.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 594 "Change Log Setup (Field) List"](../../objects/page/594.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 595 "Change Log Entries"](../../objects/page/595.md) · on [Table 405 "Change Log Entry"](../../objects/table/405.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 710 "Activity Log"](../../objects/page/710.md) · on [Table 710 "Activity Log"](../../objects/table/710.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 774 "User Details"](../../objects/page/774.md) · captioned "Users" · on [Table 774 "User Details"](../../objects/table/774.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 1366 "Field Monitoring Setup"](../../objects/page/1366.md) · on [Table 1366 "Field Monitoring Setup"](../../objects/table/1366.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 1367 "Monitored Field Log Entries"](../../objects/page/1367.md) · on [Table 405 "Change Log Entry"](../../objects/table/405.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 1368 "Monitor Field Setup Wizard"](../../objects/page/1368.md) · captioned "Field Monitoring Assisted Setup Guide" · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 1369 "Monitored Fields Worksheet"](../../objects/page/1369.md) · on [Table 404 "Change Log Setup (Field)"](../../objects/table/404.md) · via [Auditing](security-privacy-and-compliance/auditing.md)
- [Page 6300 "Azure AD App Setup Wizard"](../../objects/page/6300.md) · captioned "Set Up Microsoft Entra ID" · via [Security](security-privacy-and-compliance/security.md)
- [Page 6301 "Azure AD App Setup Part"](../../objects/page/6301.md) · captioned "<Microsoft Entra application Setup Part>" · on [Table 6300 "Azure AD App Setup"](../../objects/table/6300.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 6302 "Azure AD Access Dialog"](../../objects/page/6302.md) · captioned "Microsoft Entra service permissions" · via [Security](security-privacy-and-compliance/security.md)
- [Page 8930 "Email View Policy List"](../../objects/page/8930.md) · captioned "User Email View Policies" · on [Table 8930 "Email View Policy"](../../objects/table/8930.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9061 "Plan Configuration List"](../../objects/page/9061.md) · captioned "License Configuration" · on [Table 9017 "Plan Configuration"](../../objects/table/9017.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9062 "User Security Activities"](../../objects/page/9062.md) · on [Table 9062 "User Security Status"](../../objects/table/9062.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9069 "Plan Configuration Card"](../../objects/page/9069.md) · captioned "License Configuration" · on [Table 9017 "Plan Configuration"](../../objects/table/9017.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9800 "Users"](../../objects/page/9800.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9807 "User Card"](../../objects/page/9807.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9808 "User Permission Sets"](../../objects/page/9808.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9816 "Permission Set by User"](../../objects/page/9816.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9818 "User Security Status List"](../../objects/page/9818.md) · captioned "User Security Status" · on [Table 9062 "User Security Status"](../../objects/table/9062.md) · via [Security](security-privacy-and-compliance/security.md)
- [Page 9874 "Permission Set By Sec. Group"](../../objects/page/9874.md) · captioned "Permission Set by Security Group" · via [Security](security-privacy-and-compliance/security.md)

Learn also names 4 objects with no object page: page/9173, page/9830, page/9831, page/9838.

Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn's own.