Security & Compliance
Security & Compliance
SolutionX Blueprint is designed with enterprise-grade security principles and is deployed within the customer’s Microsoft environment to ensure data ownership, access control, and regulatory alignment.
Deployment Architecture
SolutionX Blueprint is delivered as a managed solution built on:
-
Microsoft Power Apps
-
Microsoft Dataverse
-
Microsoft Azure infrastructure
The platform is installed directly within the customer’s Microsoft tenant.
All business data remains inside the customer’s environment and is not stored on external servers controlled by SolutionX Blueprint.
Data Ownership & Control
Customers retain full ownership and control of their data.
-
Data is stored within the customer’s Dataverse instance
-
Access is managed by the customer’s administrators
-
Data policies and retention are governed by the customer’s Microsoft subscription
SolutionX Blueprint does not independently host or replicate customer business data.
Access Control & Role-Based Security
The platform supports role-based access control (RBAC) consistent with Microsoft Power Platform security standards.
Administrators can:
-
Define user roles
-
Restrict access to specific constructs
-
Control authoring vs. read-only permissions
-
Manage environment-level security
This enables separation of duties across architecture, business, and delivery teams.
Data Protection
Security controls are inherited from Microsoft Azure and Power Platform services, including:
-
Encryption at rest
-
Encryption in transit (TLS)
-
Identity management via Microsoft Entra ID (Azure Active Directory)
-
Multi-factor authentication (as configured by customer)
-
Environment-level isolation
For details on Microsoft cloud security practices, refer to Microsoft Azure and Power Platform documentation.
Compliance Alignment
SolutionX Blueprint operates within Microsoft’s cloud infrastructure, which supports compliance standards including:
-
ISO 27001
-
SOC 1 / SOC 2
-
GDPR support
-
HIPAA (depending on customer configuration)
Compliance obligations related to customer data are managed under the customer’s Microsoft agreement.
Application Lifecycle & Updates
The platform is delivered as a managed solution package.
-
Updates are version-controlled
-
Solution imports follow Power Platform best practices
-
Environments can be separated for development, testing, and production
This ensures controlled deployment and change management.
Data Residency
Data residency is determined by the customer’s selected Microsoft region.
SolutionX Blueprint does not transfer customer data outside the configured Microsoft region.
Business Continuity
Data backup, redundancy, and disaster recovery are governed by Microsoft’s Azure and Dataverse infrastructure.
Customers may configure backup policies in accordance with their Microsoft subscription.
Support & Security Inquiries
If you have security-related questions, please contact: info@solutionxblueprint.com