DCS Migrate is fully integrated into Natuvion's information security and data protection management system.

DCS Migrate is included in the scope of Natuvion's ISO 27001 certification and TISAX assessment.

DCS Migrate is an SAP-based solution that is installed in its own namespace directly within the customer's SAP system and is operated via the SAP interface. Natuvion does not operate its own infrastructure for this purpose.

The customer is responsible for the operation, infrastructure, data backup, and monitoring of its SAP system, as well as for the data processed and its users' access permissions. Natuvion provides software, updates, and documentation, and offers support within the scope of agreed-upon project or support services.

The customer installs DCS Migrate using SAP Transport, assigns the provided roles according to the principle of least privilege, and operates the SAP system in accordance with their organization's security policies. Transformations should be tested in test or copy systems before being deployed in production systems.

Processing and storage take place entirely within the customer's SAP system landscape. Data is transferred between systems only if the customer configures this in the transformation.

Logs for processing runs are stored in the customer's SAP system.

DCS Migrate offers optional AI features to support the migration process, the use of which is customized in consultation with the customer.

Since DCS Migrate runs in the customer's SAP system, all data remains within the customer's environment and under the customer's responsibility even after the contract ends. Once the project is complete, the customer can remove DCS Migrate from their system.

Natuvion provides predefined SAP roles for various tasks. The customer is responsible for assigning these roles and reviewing them on a regular basis.

Natuvion accesses customer systems only through users provided and authorized by the customer and within the agreed-upon scope of the project or support. The customer determines the scope and duration of such access.

The level of protection during storage and transmission depends on the configuration of the SAP system and the customer's infrastructure.

DCS Migrate logs processing runs, including the affected tables, so that transformations can be traced. The logs remain in the customer's SAP system.

DCS Migrate is developed according to a secure development lifecycle that includes defined security policies, code reviews, and regular security audits. Deployment within a dedicated SAP namespace prevents conflicts with customer-specific developments.

Natuvion identifies and resolves vulnerabilities and provides fixes and new releases as SAP transports. The customer is responsible for implementing and testing them in the system landscape.

Releases are versioned and delivered with documentation. Once the project is complete, the customer can remove DCS Migrate from its system; the transformed data remains the customer’s responsibility.

The customer is responsible for handling incidents in the customer's SAP system; Natuvion provides support within the scope of the agreed-upon support services. Product-related security issues are handled in accordance with Natuvion's incident management process.

Natuvion provides information about product-related security issues and available fixes through the agreed-upon channels.

Availability depends on the customer's SAP system and is the customer's responsibility. Natuvion's development and support teams are integrated into Natuvion's emergency and business continuity management.

The customer is responsible for backing up and restoring the SAP system.

Since DCS Migrate runs on the customer’s SAP system, Natuvion does not use any external hosting service providers. To the extent that Natuvion engages subcontractors in connection with project or support services, these subcontractors are contractually bound and named in the General Terms and Conditions (AVV).