custom visual data sent out side

[skygold16]

Hi All,

Recently, I discovered that the Map visual in Power BI can send the data out side your geographical location to get the right cordinates for the maps. 

"The Power BI service and Power BI Desktop send Bing the geo data it needs to create the map visualization. This data may include the data in the Location, Latitude, and Longitude buckets of the visual's field well. Exactly what is sent varies by map type. 

This is brought down me a question, what happend if any user use any sensitive information in the any of the above field, would that be sent out too? 

This also bring me a question that how safe any MS certified custom visuals are? How do I make sure that the data is not leaving my organisation and also not leaving Geo at least? 

[skygold16]

Just responding here for anyone else looking for some reference in future:

As per MS document :

What tests are done during the certification process?
The certification process tests include, but aren't limited to:

• Code reviews
  Static code analysis
  Data leakage
  Data fuzzing
  Penetration testing
  Access XSS testing
  Malicious data injection
  Input validation
  Functional testing

However, Microsoft isn't the author of third-party Power BI visuals. We advise customers to contact the author directly to verify the functionality of third-party visuals.

[lbendlin]

what happend if any user use any sensitive information in the any of the above field, would that be sent out too? 

That is not a hypothetical question. That data IS sent out too. This is the main reason why the use of these map visuals can be restricted by your tenant admin.

Certified visuals do not process your data at a third party site. So these are safe to use.

[skygold16]

Thanks for the reply @lbendlin .

When you say, "certfied visuals do not process your data", do you mean that using certified visual will not send any data outside my org? Do you know any documentation that I can refer too? I am fighting my battle with few internal teams and I want o keep my cyber team happy too. 🙂 Any reference will be much appreciated. 

[lbendlin · Accepted solution]

Get your Power BI visuals certified - Power BI | Microsoft Learn - see the "not allowed"  section.