Publish Workload Requirements Attestation Checklist

We, the vendor, Navida Informationssysteme GmbH, confirm and attest to reviewing, meeting and complying with the requirements outlined in the Microsoft Fabric Workload Development Kit (WDK) specifically the Publish Workload Requirements located at https://learn.microsoft.com/en-us/fabric/workload-development-kit/publish-workload-requirements.

The following sections document details, exceptions, or variances regarding the attestation of adherence to the Publish Workload Requirements.

Business Requirements:

Value To Customers: The workload provides the following value to customers – BC2Fabric is a no-code integration solution that seamlessly brings Microsoft Dynamics 365 Business Central data into Microsoft Fabric. It provides near real-time, secure, and scalable data synchronization, enabling businesses to leverage the full power of Fabric for BI, AI, and advanced analytics on their ERP data. It serves as the essential data foundation for the new standard Power BI reports from Microsoft.

Trial: We provide an easy and fast trial experience. The trial is available to the customer without waiting time (less than 5 seconds), and provides a free and easy way to explore the offered workload for a limited time in accordance with Microsoft guidelines for Trials¹

  • Yes
  • No

Monetization: The workload is available on the marketplace for the customer to procure with or without a trial in accordance with the monetization guidelines²

  • Yes
  • No

*Link to Marketplace Offer: https://appsource.microsoft.com/de-de/product/saas/navidainformationssysteme1611067488644.bc_2_fabric_saas

Technical Requirements:

Microsoft Entra Access: The workload(s) use Microsoft Entra authentication and authorization³.

  • No additional authentication and authorization mechanisms are used
  • Additional authentication and authorization mechanisms are used for stored data In Fabric

One Lake: Workloads integrate with One Lake⁴ to store data in the standard formats supported by the Fabric platform so that other services can take advantage of it.

  • All data and metadata is stored in One Lake or Fabric Data Stores
  • Not all data and metadata is stored in One Lake or Fabric Data Stores

Microsoft Entra Conditional Access: Enterprise customers require centralized control and management of the identities and credentials used to access their resources and data and via Microsoft Entra to further secure their environment via conditional access⁵.

  • The service works in its entirety with even if customers enable this functionality
  • The service works in with limitations if customers enable this functionality
  • The service does not work with Microsoft Entra Conditional Access

Admin REST API: Admin REST APIs are an integral part of Fabric admin and governance process.

  • Microsoft Fabric Admin API’s are being leveraged (/admin/*)
  • No Microsoft Fabric Admin API’s are being used

Customer Facing Monitoring & Diagnostic: Health and telemetry data needs to be stored for a minimum for 30 days including activity ID for customer support purposes, including Trials.

  • Minimum 30 days requirement is adhered to
  • Vendor stores the data for __ additional days beyond the minimum requirement

B2B: The implementation of the workload is in line with Microsoft Fabric’s sharing strategy focused on allowing customers to collaborate with their business partners, customers, vendors, subsidiaries etc. It also means users from other tenants⁶ can potentially be granted access to items partners are creating.

  • Cross tenant B2B collaboration supported
  • Workload Item Access only within the tenant

Business Continuity and disaster recovery: The vendor has a comprehensive Business Continuity and Disaster Recovery (BCDR) plans designed to tackle unplanned disasters and recovery steps. The BCDR Policy is available upon request

Performance: The Workload implementation takes measures to test and track performance of their Items

  • Performance Metrics on workload performance are available via the monitoring hub
  • Workload additionally includes a separate monitoring UI to test and track performance
  • Performance tracking is not currently available to the end user however vendor support personnel can monitor, test, track performance via their internal instrumentation and monitoring systems

Presence: To ensure that customer expectations independent of their home or capacity region are met, vendors need to align with fabric regions⁷ and clouds.

  • Service availability and colocation/alignment in the following fabric regions: East US, East US 2, Central US, West US, West Europe, North Europe, UK South
  • All or part of the service does not reside in Azure

Public APIs: Fabric Public APIs⁸ are the backbone of automation, enabling seamless communication and integration for both customers and partners within the Fabric ecosystem.

  • The workload uses Fabric Public APIs

Design / UX Requirements:

Common UX: The workload and all item types the partner provides as part of it comply with the Fabric UX guidelines⁹.

  • Yes
  • The following variance and/or exceptions have been granted by Microsoft

Item Creation Experience: The item creation experience is in accordance with the Fabric UX System¹⁰.

  • Yes
  • No

Monitoring Hub¹¹: All Long running operations need to integrate with Fabric Monitoring Hub.

  • Yes
  • No

Trial Experience: The workload provides a Trial Experience for users as outlined in the design guidelines¹²

  • Trial Supported
  • Trial Not Supported

Monetization Experience: The monetization experience is in line with the design guidelines¹³ provided

  • The monetization experience is completely integrated with the market place and compliant with the guidelines
  • Bring Your Own License (BYOL)
  • Free / Freemium
  • Other

Accessibility: The user experience is in compliance with the Fabric UX design guidelines for Accessibility¹⁴

  • The user experience is completely compliant with the guidelines
  • The following limitations exist

World Readiness / Internationalization: English is supported as the default language.

  • English is the only supported language
  • The following are the additional languages supported

Item Settings: Item settings are implemented as a part of the ribbon as outlined in the UX guidelines¹⁵

  • Yes
  • No

Samples: Samples are optionally provided that preconfigure items of their type their type to help customers get started more easily.

  • Samples not provided
  • Samples for pre-configuration of items provided

Custom Actions: Custom actions can be optionally provided as a part of the item editor.

  • Custom Actions are not implemented
  • Custom Actions implemented as part of Workload

Workspace settings: Workspace settings provide a way that workloads can be configured on a workspace level.

  • Supported
  • Not Supported

Global Search: Searching for items in Fabric is supported through the top search bar.

  • Supported
  • Not supported

Security / Compliance Requirements:

Security general: Protection of customer data and metadata is of paramount importance¹⁶. Navida follows a robust Secure Software Development Lifecycle (SSDLC) to ensure the security and integrity of our products. Our process includes comprehensive security reviews and assessments which are periodically performed. Any identified security issues that could impact customers are addressed with priority.

Privacy: Partners that build workloads also have a responsibility to protect¹⁷ that data when they access it.

  • Extra Requirements: Vendor attests that only essential HTTP-only cookies¹⁸ are used by the Workload and only after positively authenticating the user.

The workload allows users to configure and monitor data integration pipelines and is subject to the Navida Privacy Policy. The workload does not utilize cookies for storing client information. For detailed information please refer to: [Please Add Your Privacy Policy URL Here]

Data Residency: Microsoft Fabric is making an Enterprise Promise around data not leaving the geography¹⁹ of the tenant. No data is stored within the BC2Fabric service. BC2Fabric provides an in-memory data integration solution that moves data from Business Central directly into Microsoft Fabric without storing it in the navida service layer, so Data Residency is not applicable.

Compliance: The publisher attests to the following security, data and compliance²⁰ regulations and standards. Navida is committed to ensuring Customers can trust our products and practices and meet their compliance obligations. For details on our compliance with standards such as GDPR, please refer to our Trust Center or contact our support team. *Compliance information is available from: https://www.navida.eu/en/datenschutz-deutsch

Support:

Live site: Partner workloads are an integral part of Fabric that require the Microsoft support teams need to be aware of how to contact you in case customers are reaching out to us directly. Microsoft direct vendor outreach:

Supportability²¹: Vendors are responsible for defining and documenting their support parameters (Service level agreement, contact methods, ...).

  • Vendor attests that support information is published to the marketplace offering and available to user/customers directly via the workload

Service Health and Availability: Vendors need to host a service health dashboard that shows their service health and availability to customers. Service health and availability status is visible to customers on their service landing page immediately after login.

Fabric Features:

Application Life Cycle Management (ALM): Microsoft Fabric's lifecycle²³ management tools enable efficient product development, continuous updates, fast releases, and ongoing feature enhancements.

  • Supported
  • Not Supported

Private Links: In Fabric, you can configure and use an endpoint²⁴ that allows your organization to access Fabric privately.

  • Supported
  • Not Supported

Data Hub: The OneLake data hub²⁵ makes it easy to find, explore, and use the Fabric data items in your organization that you have access to.

  • Supported
  • Not Supported

Data Lineage: Understanding the flow of data from the data source to its destination.

  • Supported
  • Not Supported

Sensitivity labels: Sensitivity labels²⁶ from Microsoft Purview Information Protection on items can guard your sensitive content against unauthorized data access and leakage.

  • Supported
  • Not Supported

Additional Notes

Please use this section to provide any further explanations, references, or notes that may be relevant to your attestation: -