Data privacy

A shared responsibility

The foundation for SitecoreAI’s data security and privacy approach is built upon a shared responsibility model. With the shared responsibility model, Sitecore delivers a solution that safeguards the customer’s data, while customers properly implement SitecoreAI and their front-end application to meet their data security and privacy obligations.

Sitecore's responsibility

Sitecore ensures that SitecoreAI implements controls for securing and protecting customer data. The controls are in place at each tier of the SitecoreAI architecture, and they include, but are not limited to:

• Public cloud infrastructure
  • Sitecore secures, manages, and monitors the cloud infrastructure used to run the SitecoreAI services in partnership with its public cloud partners: Microsoft Azure and Amazon Web Services (AWS).
  • Sitecore applies regular operating system updates.
  • Sitecore applies and monitors network and host-level controls, via the Sitecore Security Operations Center (SOC).
• Storage
  • SitecoreAI segregates database and file storage between customers.
  • SitecoreAI manages customer data through Azure SQL and Azure Blob storage, with all data encrypted at rest and in transit. SitecoreAI uses Transparent Data Encryption (TDE) for Azure SQL and server-side encryption (SSE) for Blob storage. Both use Microsoft-managed 256-bit AES encryption keys that are FIPS 140-2 compliant.
  • SitecoreAI maintains database and storage backups in geo-redundant locations to ensure availability if a data center region is impacted.
  • Customer data in SitecoreAI is not accessed by Sitecore without the customer's explicit permission.
• Application
  • SitecoreAI is implemented through a secure software development lifecycle to ensure that the SitecoreAI application follows security best practices.
  • SitecoreAI uses scanning and third-party penetration testing to validate its products.
  • SitecoreAI logically separates customer environments.
  • SitecoreAI provides a role-based access control model that enables customers to define which users have access to their environments, Sitecore applications, and data.
  • SitecoreAI supports single sign-on (SSO) with OpenID Connect (OIDC) and SAML identity providers.
  • SitecoreAI services are invoked using APIs that run on endpoints such as edge-platform.sitecorecloud.io, a stateless proxy that doesn't store customer data.
• Delivery
  • SitecoreAI users can only access their content in SitecoreAI using a secure access token.
  • SitecoreAI utilizes a web application firewall (WAF), content delivery network (CDN), and rate limiting to ensure a predictable quality of service.

The customer's responsibility

Customers are responsible for implementing SitecoreAI and their front-end applications in a manner that enables them to meet their compliance obligations. Customers must be conscious of personal site visitor data that's presented or captured through their front-end application.

Data privacy implementation considerations

SitecoreAI is a digital experience platform that combines multiple products and capabilities, some of which are designed to process personal data, including personally identifiable information (PII). Depending on how SitecoreAI is configured and used, customers may collect, store, analyze, or otherwise process personal data through the platform. Customers are responsible for implementing and configuring SitecoreAI in accordance with their own privacy obligations, internal data governance policies, and applicable laws and regulations. This includes making appropriate architectural, configuration, and data management decisions relating to the collection, use, retention, sharing, and protection of personal data.

When managing data that interfaces with SitecoreAI, customers must be aware of the following product functionality and implementation considerations.