Dynamics ATS is designed to support customers in meeting international data privacy and security requirements by operating within the customer’s own Microsoft environment.
Dynamics ATS is installed in the customer’s Microsoft Power Platform / Dataverse environment and uses Microsoft Entra ID for identity, authentication, and access control. Customer data is stored in the customer’s Dataverse environment, governed by the customer’s Microsoft tenant, security roles, environment settings, retention policies, and administrative controls.
Because Dynamics ATS runs on Microsoft Power Platform, customers can use Microsoft’s compliance, security, identity, data residency, auditing, and governance capabilities to help meet applicable privacy and regulatory obligations. Microsoft Power Platform customer data is generally stored in the tenant’s assigned Azure geography unless the customer deploys services across multiple regions. Data storage and governance in Power Platform - Power Platform | Microsoft Learn
Regulations that customers may be able to support through their Microsoft environment and Dynamics ATS configuration include:
- GDPR — General Data Protection Regulation
- CCPA / CPRA — California privacy requirements
- LGPD — Brazil’s general data protection law
- Australian Privacy Act
- HIPAA-related requirements, where applicable and where the customer has the necessary Microsoft agreements, configurations, and internal controls in place
Dynamics ATS does not replace the customer’s own legal, compliance, security, consent, retention, or data subject request obligations. Customers remain responsible for determining which regulations apply to their organization and for configuring Microsoft Power Platform, Microsoft Entra ID, Dataverse, Dynamics ATS, and their internal processes accordingly.
In short, Dynamics ATS provides a Microsoft-native architecture that supports compliance efforts; final regulatory compliance depends on the customer’s Microsoft environment, configuration, agreements, policies, and operating procedures.