TERMS OF USE

1. License (Per-Tenant SaaS)

This Extension is licensed per Microsoft Dynamics 365 Business Central tenant. The license is limited, non-exclusive, non-transferable, non-sublicensable, and revocable. Use outside the licensed tenant is prohibited.

2. Platform Dependency

The Extension operates solely within Microsoft’s Business Central SaaS environment. Functionality depends on Microsoft’s infrastructure, APIs, and platform availability. Publisher is not responsible for Microsoft platform outages, API changes, or deprecations.

3. Strong Audit & Compliance Disclaimer

The Extension provides configurable change logging and approval workflows. It is NOT:

• A certified audit system
• A SOX, HIPAA, PCI, or regulatory compliance solution
• A substitute for internal controls, legal advice, or external audit review

Customer acknowledges:

• Logging relies on available Business Central events and extension triggers.
• Platform or system-level actions may not be fully captured.
• Improper configuration may result in incomplete logs.
• Regulatory compliance remains Customer’s sole responsibility.

Publisher makes no representation that the Extension satisfies any statutory, regulatory, or industry-specific requirement.

4. Customer Responsibilities

• Configure approval hierarchies and segregation of duties
• Validate audit completeness
• Maintain internal control policies
• Ensure legal and regulatory compliance

5. No Warranty

The Extension is provided "AS IS" and "AS AVAILABLE" without warranties of any kind.

6. Limitation of Liability

To the maximum extent permitted by law, Publisher’s total aggregate liability shall not exceed the greater of: (1) fees paid in the prior 12 months, or (2) USD $5,000.

Publisher is not liable for indirect, incidental, consequential, or regulatory damages.

7. Termination

Upon termination, license rights immediately cease. All Customer Data remains within the Customer’s Business Central tenant.

DATA PROCESSING ADDENDUM (DPA)

1. Roles

Customer acts as Data Controller. Publisher acts as Data Processor.

2. Scope of Processing

The Extension processes Customer Data solely within the Business Central tenant. Publisher does not independently store, export, or host Customer Data outside Microsoft infrastructure.

3. Security Measures

• Secure development practices
• No external data transmission unless documented
• Least-privilege access principles

4. Data Breach Notification

Publisher will notify Customer without undue delay upon confirmed breach caused directly by the Extension.

5. Subprocessors

No subprocessors are used outside Microsoft infrastructure unless separately disclosed.

6. International Transfers

Data residency and cross-border transfers are governed by Microsoft’s infrastructure and applicable safeguards.

PRIVACY POLICY

1. Information Processed

The Extension processes data stored within Customer’s Business Central tenant, which may include:

• User identifiers
• Record changes
• Approval metadata
• Timestamps and system metadata

2. Data Collection Outside Tenant

The Extension does not independently collect, sell, or store personal data outside the Customer tenant unless explicitly documented.

3. Use of Data

Data is processed solely to provide change logging and workflow functionality.

4. Data Retention

All data remains within the Customer’s Business Central environment. Publisher does not retain independent copies after termination.

5. Contact

For privacy inquiries: support@navcoredev.com