Security, compliance, data residency and availability—summarised in one place. Beagel runs on Microsoft Azure; we inherit Azure’s physical and infrastructure controls while implementing application-level controls of our own. Certificates listed for Azure refer to the platform, not Beagel.
Where we reference platform certifications (ISO/SOC, etc.), they apply to Azure.
Beagel does not claim certifications unless explicitly stated in a Beagel-issued certificate.
Data Processing Addendum available on request; privacy program aligned to GDPR principles.
Configurable retention; exportable evidence packs from offer events for regulators and auditors.
Available under NDA.
Cloud: Microsoft Azure.
Regions: EU and other regions by requirement; tenancy is logically segregated per operator.
Availability & SLA: Enterprise SLA and support windows provided in contract.
Incident communications: We maintain incident response procedures and customer comms playbooks.
SSO: SAML 2.0 / OpenID Connect with major IdPs (e.g., Entra ID/Okta).
RBAC: Roles align to agency, branch, group and admin levels
SAP Business Network (Ariba). We route POs/invoices via your Ariba configuration; vendor identifiers available on request.
OpenAPI (OAS): Public API surface with OAS definitions; SDK samples available.  
Microservices & orchestration: Services architecture with Kubernetes; OAuth 2.0 for delegated access.
Claims are confirmed against the proposed deployment rather than treated as generic certification.
Hosting, data flows, residency options, encryption, subprocessors and integration boundaries.
SSO, role-based access, activity records, incident processes, availability and support responsibilities.
Qualified buyers can request the relevant security, service and procurement material for their evaluation.