Forum Discussion

skygold16's avatar
skygold16
Helper II
2 years ago
Solved

custom visual data sent out side

Hi All,

 

Recently, I discovered that the Map visual in Power BI can send the data out side your geographical location to get the right cordinates for the maps. 

"The Power BI service and Power BI Desktop send Bing the geo data it needs to create the map visualization. This data may include the data in the Location, Latitude, and Longitude buckets of the visual's field well. Exactly what is sent varies by map type. 

 

This is brought down me a question, what happend if any user use any sensitive information in the any of the above field, would that be sent out too? 

This also bring me a question that how safe any MS certified custom visuals are? How do I make sure that the data is not leaving my organisation and also not leaving Geo at least? 

Need Help

4 Replies

  • lbendlin's avatar
    lbendlin
    Super User
    2 years ago
    what happend if any user use any sensitive information in the any of the above field, would that be sent out too?

    That is not a hypothetical question. That data IS sent out too. This is the main reason why the use of these map visuals can be restricted by your tenant admin.

     

    Certified visuals do not process your data at a third party site. So these are safe to use.

    • skygold16's avatar
      skygold16
      Helper II
      2 years ago

      Thanks for the reply lbendlin .

       

      When you say, "certfied visuals do not process your data", do you mean that using certified visual will not send any data outside my org? Do you know any documentation that I can refer too? I am fighting my battle with few internal teams and I want o keep my cyber team happy too. 🙂 Any reference will be much appreciated. 

  • skygold16's avatar
    skygold16
    Helper II
    2 years ago

    Just responding here for anyone else looking for some reference in future:

    As per MS document :


    What tests are done during the certification process?
    The certification process tests include, but aren't limited to:

    • Code reviews
      Static code analysis
      Data leakage
      Data fuzzing
      Penetration testing
      Access XSS testing
      Malicious data injection
      Input validation
      Functional testing

    However, Microsoft isn't the author of third-party Power BI visuals. We advise customers to contact the author directly to verify the functionality of third-party visuals.