Data masking
A.8.11
-
Last updated
Excluded
Catalog reference
Where appropriate, apply data masking techniques (anonymisation, pseudonymisation, tokenisation) to limit exposure of sensitive data — especially in non-production environments.
Exclusion justification
Customer data is handled only inside the customer's own tenant and on the production platforms. Tidewell IT makes no test, analytics, or training copies of customer data that would need masking.
None due within 31 days.