Saas Software As A Service Data Security And Privacy

In one of the other articles on SaaS, Business Applications

, SaaS and SMB Market @, we proposed that SaaS will be a mass enabler for SMB (small and medium business) market. In order to provide effective SaaS solutions for enabling multi tenant systems, it is imperative that the key issues of data security and privacy are addressed.

It is important to acknowledge and identify that the requirements, sensitivity to data security and privacy; and pricing levels demand different levels of SaaS enabling. There may be an application that can share the same database among different clients as the application itself is not core to the company and data does not demand the highest level of data security. On the other hand, there may be an application that requires data encryption along with separate and dedicated database as the application data demands highest level of data security.

Lets look at different levels of SaaS enablement for business applications. The SaaS solution enables a multi-tenant system that can be used by multiple clients. The solution enables a secure and trusted environment where clients can execute business processes with complete confidence.

The critical aspect of multi-tenancy solution is data security & privacy and application security. In simple terms, it is about data separation and application separation. In this article, we shall focus on data security and privacy.

There are multiple mechanisms, which can be used to ensure data separation so that a client does not get access to another clients data on the same SaaS solution.

1. Database Separation: This solution provides a very high level of data privacy as a separate database is allocated to each customer. This comes at a higher cost due to licensing and operational cost on the SaaS vendor side.

2. Schema/Table Separation: This solution provides a medium level of data privacy as separate tables are assigned to each customer.

3. Data Separation: This solution provides the lowest level of data privacy as same tables are used to store customer data.

4. Data Encryption: Data encryption can be used to provide a very high level of data privacy to customer data. Data encryption can be used with any of the above solutions. Typically data encryption is done using symmetric encryption with algorithms like AES (Advanced Encryption Standard).

One should carefully evaluate application requirements and risk profile to identify the appropriate level of data separation.

by: R Chopra

POST COMMENT

Benefits of R-Lite HR Recruiting Software How to Recover Lost Data Due to File System Error-65535 New Era Of Dot Net Software Development Employee Scheduling Software Improves Call Center Performance Supply Chain Management Software Do You Need Resort Software? Choosing A Spa Salon Software Unintended Consequences: What Happens To Software Licenses Upon A Merger Or Reorganization? 2010 Form 941- Payroll Software How To Spy On A cell Phone - SpyBubble Software Review Spy Mobile Phone Software - Separating Reality from Fiction Ps3 Dns Error - How To Fix The Dns Problem On My Playstation 3 Ps3 No Video - Fix Playstation 3 No Video Error