As consultants we have access to customers’ Business Central, financial data and documents. That is why we have fixed procedures for how we gain access to systems and handle the information we work with.
DynaFlow holds D-mærket, the Danish labelling scheme for IT security and responsible data use. It means our work with security and data has been reviewed and meets the scheme’s requirements.
We use personal accounts and multi-factor authentication (MFA). We get access to what the task requires, and access is removed when we no longer need it.
As a rule we work with data in your own environment. If a task requires financial data to be copied to our systems, we agree on it with you and define what the information will be used for.
We have reviewed how we use data on our website and in our advisory work. Our data ethics considerations are publicly available.
D-mærket requires an annual review. We go through our procedures and keep our policies up to date.
We help customers get an overview of access to their Business Central and keep permissions up to date. Here are two examples from work we have done.
Over time, users can end up with more permissions than their work requires. Extra access is granted to solve a task and may never be removed again.
We have helped customers review permissions and align them with employees’ roles. As part of the work we produced a permission matrix showing who has access to what. We also agreed who approves changes and when permissions are to be reviewed again.
When an AI assistant is connected to Business Central via MCP (Model Context Protocol), you need to decide which companies and information it may access.
In one specific engagement we limited an AI assistant’s access to selected companies and data. The user had broader access themselves, but the assistant could only reach what had been approved for the task.
D-mærket applies to DynaFlow as a company. It is not a certification of the solutions we deliver to customers.
We can help review user permissions, agree on regular controls or scope AI assistants’ access to your Business Central.
DynaFlow ApS — Business Central and Dynamics NAV advisory.
