Data protection in Cloud Apps

Cloud Apps is a cloud-based solution that extends the capabilities of ERP systems like SAP Business One and Microsoft Dynamics 365 Business Central. Our top priority is protecting your data throughout its lifecycle from synchronization to storage and access.

1. Hosting and infrastructure

Cloud Apps is hosted in Microsoft Azure cloud environments, with deployments in:

• West Europe (Netherlands)
• North America (Canada Central, Toronto)

Customers are connected to the region closest to their operations to ensure low latency and high availability.

Microsoft Azure protects your data using multiple layers of security and encryption protocols. For details, see Microsoft’s Data residency page and the Azure encryption overview. You may also want to read Microsoft’s white paper on how they handle your data in the cloud, covering sub-processors and data privacy.

Architectural overview

Here is a draft of the overall architecture for Cloud Apps:

2. Data synchronization and encryption

Our solution extends the functionality of your ERP system by synchronizing only the necessary data via secure APIs. Key aspects of our data handling include:

• End-to-end encryption: All data in transit is encrypted end-to-end using HTTPS. At rest, data is protected using industry-standard AES-256 encryption in Microsoft Azure.
• Data synchronization: Communication is established through the standard APIs of supported ERP systems.
  • SAP Business One uses Basic Authentication;
  • Microsoft Dynamics 365 Business Central uses OAuth 2.0.

2.1. IP whitelisting

To ensure secure and reliable communication, ERP systems must whitelist specific fixed IP addresses used by the Cloud Apps cloud service. These IP addresses are used for outbound connections from the Cloud Apps solution to the customer’s ERP system.

Whitelisting these IPs is essential to allow the cloud service to establish a secure connection with your ERP environment.

For detailed guidance on setting up the connection, please refer to

• Enable communication with SAP Business One

3. Authentication and access control

Boyum IT has implemented robust authentication mechanisms to ensure that only authorized users can access the system:

• Authentication is managed through an identity provider hosted in Boyum IT’s own secure data center in Denmark;
• Audit logging tracks access and changes to sensitive data for accountability and compliance.

4. Compliance and data privacy

Cloud Apps is fully compliant with the General Data Protection Regulation (GDPR). We ensure:

• Personal data is handled in accordance with GDPR principles.
• Data is stored securely in Azure databases with strict access controls.

For a detailed list of personal data processed, see: Cloud Apps and the GDPR.

Your rights as a data subject

As a data subject, you have a number of rights, including the right to access, correct and delete data. You can read more about your rights in our privacy policy, which is available on our website.