I'm unclear on how to properly word our security status. The data center our hosted IFD CRM instance is running on has not paid for these audits. However, the Microsoft literature suggests that CRM Online (which is hosted on MS servers) has these certifications and the certifications are growing with each service update.
If our CRM on-premise software is up-to-date, is it safe to say that the CRM on-premise software itself meets the standards outlined in here, but the data center has not been "certified" by an auditor?
- ISO 27001
- SAS70 Type II
- Sarbanes–Oxley
- Microsoft Dynamics CRM Online Service Safe Harbor
- ISO 27001
- SSAE 16 SOC1 (Type II)
- Data Processing Agreement (DPA)
- EU Model Clauses
- Business Associates Agreement - enables a company to be Health Insurance Portability and Accountability Act (HIPAA) compliant