Subscription Management takes on the responsibility of connecting your application with your end-users. We've taken a number of steps to ensure the confidentiality of your data whilst it's entrusted with us.
We work in close collaboration with our Security Team to ensure our design and architecture meets and exceeds industry standards, with regular penetration tests validating our controls.
Subscription Management uses your Stripe Secret Key to authenticate to your Stripe Account and leverage this connection to facilitate operations performed within Subscription Management.
This key provides full access to your Stripe account and can broker access to your customer data as well as any billing transactions. For these reasons, we recommend you follow the below safeguards:
- Keep your Stripe Secret Key in a robust location such as Azure's Key Vault)
- Mark any methods that work with Secrets as NonDebuggable
- Mark any object instances that work with Secrets as accessible only within the application. Single instance codeunits may be used only if its methods are marked with internal access modifier - the
internalsVisibleTosetting declared within the applications JSON file should be blank to disallow ANY apps from accessing it.
Subscription Management keeps your Stripe Secret Key strongly encrypted through the use of server-side encryption mechanisms, leveraging TLS 1.2 to ensure robust, encrypted transport to external parties.
Subscription Management collects and stores information from you and your customer. We classify this information into the categories listed below and depending on the category, we apply different storage and usage requirements:
| Category | Description | Entered | Stored | Used |
|---|---|---|---|---|
| Publisher's Auth Info | Publisher's Stripe API keys | By publisher using Subscription Management API | Encrypted within Subscription Management | By Subscription Management to authorize your app with your Stripe account |
| Publisher's Info | Publisher's Stripe ID, name, support email, Stripe TAX ID, link to TOC and privacy policy | By publisher using Stripe UI | Public within Subscription Management | By Subscription Management to operate |
| Customer's User Auth Info | Customer's user SIDs | By user using Subscription Management Assisted Setup | Public within Subscription Management | By Subscription Management to authorize customer access to customer's account information |
| Customer's User Info | Customer's user email, first/last name | By user using Subscription Management Assisted Setup | Private within Publisher's Stripe Account | By publisher for service availability notifications |
| Customer's Auth Info | Customer's ID | By user using Subscription Management Assisted Setup | Public within Subscription Management | By Subscription Management to authorize customer access to customer's account information |
| Customer's Environment Info | Customer's tenant ID and environment identifier | By user using Subscription Management Assisted Setup | Private within Publisher's Stripe Account | By Subscription Management to operate |
| Customer's Billing Info | Customer's billing address, email and payment method | By user using Subscription Management Assisted Setup and Stripe Elements only for paid subscribers | Private within Publisher's Stripe Account | By Stripe to billing purposes |
Please check a complete Terms and Conditions and Privacy Policy for a more details.