11-05-2012 06:57 AM
1. Is your service multi-tenant? Can an enterprise manage their users and data independent of other enterprises using their service (such as salesforce.com) or is your
service more like a consumer service (such as dropbox.com)?
2. Do you support any sort of enterprise identity? If so, do you support SAML, openID or user provisioning APIs?
3. What level of audit logging do you perform? All read/write of data? Do you support ability for customers to view only their activity logs?
4. What level of penetration testing do you perform? Is it done by 3rd parties? How often are these tests performed?
11-14-2012 03:28 PM