Data storage

As described in the data collection section, Product Master stores information in its catalogs.

Transparency and data minimization

The Product Master catalogs are defined by the developers as part of the implementation of the solution. There should be a record of implementation artifacts that can provide inside in the attributes that are captured in the catalogs. Alternatively, reports can be run to get information on the catalog attribution.

All data is available for access, subject to sufficient access rights, through Product Master APIs. It can thus be made available and reviewed as needed.

Protection

Product Master provides a comprehensive security model that provides you with mechanisms to protect the data stored in the Product Master datastore as required by you needs. These include:
  • Definition of users and roles
  • Access control groups
  • Data access and protected catalogs

These mechanisms should be considered together when deriving a strategy around data security for the granular protection that is needed. More on Product Master security can be found at Creating a security model.

Additional considerations

The following Data Storage mechanisms are used by Product Master which users may wish to consider when assessing their GDPR readiness.
  • Storage of account data
  • Storage in backups