Security
How Keystone protects your product and supplier data, written for the teams who sign off on new software.
Define the data boundary before connecting
- Tenant isolation: customer workspaces are isolated.
- Restricted supplier access: supplier access is limited to authorised information.
- AI boundaries: controls govern AI providers and processing regions.
Agree data ownership, public DPP fields, support access, retention and deletion during the security review.
Fit your existing Microsoft and AWS environment
Keep your ERP and PIM authoritative. Scope Dynamics 365 or other systems through documented APIs and agreed field mappings. Microsoft Entra ID SSO is ready to integrate; configure and validate it with your IT team. Agree roles and audit requirements. For AWS workflows, agree API access, credentials and network requirements. Connector availability and setup effort are confirmed during scoping.
Our approach
- SSO and SAML, role-based access control, and audit logging.
- EU data handling, with provenance kept on every value.
- AI used within guardrails, with sources tracked, never as an unmanaged black box.