Data Residency
Sensei IQ is built entirely inside your Microsoft 365 tenant. Your data stays there — always. Sensei does not port, move, store, or manage your organization's data in any external system.
Your Data, Your Tenant
All Sensei IQ data is stored in your organization's Microsoft Dataverse environment, which is part of your Microsoft Power Platform subscription. This means:
- No external databases — Sensei does not operate any servers or storage systems that hold your data
- No data transfers — project, resource, portfolio, and configuration data never leaves your M365 tenant
- No Sensei access to your data — we recommend clients grant Sensei engineers access to your system so they can assist with deployment and support, but your data is governed entirely by your organization's own Microsoft 365 policies and permissions
Compliance Inherited from Microsoft
Because Sensei IQ runs on Microsoft Power Platform and Dataverse, it inherits the compliance certifications, regional data residency commitments, and security controls that Microsoft maintains for those platforms. Your data resides in the same Microsoft datacenter region as your Power Platform environment.
For organizations in regulated industries or government (including GCC tenants), this means Sensei IQ benefits from Microsoft's existing FedRAMP, ISO 27001, SOC 2, and other certifications without requiring separate accreditation of the Sensei solution itself.
Identity & Authentication
Sensei IQ authenticates exclusively against your organization's Microsoft Entra ID (formerly Azure Active Directory). There are no separate Sensei user accounts or credentials — access to Sensei IQ is controlled entirely through your existing identity and access management policies.
What Sensei Does Not Do
| Sensei does not… | Why it matters |
|---|---|
| Store your data outside your tenant | Full data sovereignty — your org retains complete control |
| Access your project data without your involvement | Sensei may collect aggregate usage metrics (such as record counts) to support product health and client success, but does not access or extract your project, resource, or portfolio data |
| Manage credentials on your behalf | Authentication is handled entirely by Microsoft Entra ID |
| Move data between tenants | Each client's deployment is fully isolated within their own M365 tenant |
For a full inventory of what is deployed into your tenant during installation, see What Gets Installed.