Compliance boundaries for multi-tenant cloud environment

Abstract

Aspects of the present disclosure relate to systems and methods for creating compliance boundaries. In one example, compliance boundaries may be implemented via a compliance tool. Data associated with a tenant may be segregated using a plurality of layers defining one or more compliance boundaries. In response to an action initiated by a compliance administrator using the compliance tool for accessing the data, it may be determined which data is within the one or more compliance boundaries associated with the compliance administrator. Access to the data determined to be within the one or more compliance boundaries associated with the compliance administrator may be authorized.

1 - 8 . (canceled) 
     
     
         9 . A computer-implemented method for implementing compliance boundaries via a compliance tool, the method comprising:
 segregating, into a layer of a plurality of layers and based on at least a first set of attributes assigned to an account, data associated with the account;   assigning to a compliance administrator, a second set of attributes defining a compliance boundary associated with the compliance administrator;   in response to receiving indication of an action initiated by the compliance administrator using the compliance tool, determining, based on at least a comparison of the first set of attributes to the second set of attributes, the data is within the compliance boundary associated with the compliance administrator; and   authorizing access to the data.   
     
     
         10 . The computer-implemented method of  claim 9 , wherein the compliance boundary includes at least one of a geographical location, a group, and a case. 
     
     
         11 . The computer-implemented method of  claim 9 , wherein the action includes at least one of a search, a hold, and an export. 
     
     
         12 . The computer-implemented method of  claim 9 , further comprising, in response to authorizing access to the data, sending the data to a client computing device for display in a user interface to the compliance tool. 
     
     
         13 . The computer-implemented method of  claim 9 , wherein the compliance tool is an electronic discovery tool. 
     
     
         14 . The computer-implemented method of  claim 9 , wherein the compliance administrator is an electronic discovery manager. 
     
     
         15 . The computer-implemented method of  claim 9 , wherein the compliance tool is extensible across a plurality of data locations in a cloud environment. 
     
     
         16 . A system comprising:
 one or more computer readable storage media; and   program instructions stored on the one or more computer readable storage media that, when executed by at least one processor, cause the at least one processor to at least:   segregate, into a layer of a plurality of layers and based on at least a first set of attributes assigned to an account, data associated with the account;   assign to a compliance administrator, a second set of attributes defining a compliance boundary associated with the compliance administrator;   in response to receiving indication of an action initiated by the compliance administrator using a compliance tool, determine, based on at least a comparison of the first set of attributes to the second set of attributes, the data is within the compliance boundary associated with the compliance administrator; and   authorize access to the data.   
     
     
         17 . The system of  claim 16 , wherein the compliance boundary includes at least one of a geographical location, a group, and a case. 
     
     
         18 . The system of  claim 16 , wherein the program instructions, when executed by the at least one processor, further cause the at least one processor to segregate, into a second layer of the plurality of layers and based on a third set of attributes, additional data associated with the account. 
     
     
         19 . The system of  claim 18 , wherein the compliance tool is extensible across the plurality of data locations in the cloud environment. 
     
     
         20 . The system of  claim 16 , wherein the program instructions, when executed by the at least one processor, further cause the at least one processor to, in response to authorizing access to the data, send the data to a client computing device for display in a user interface to the compliance tool. 
     
     
         21 . A computer-readable storage media comprising a set of instructions that cause a processor to at least:
 segregate, into a layer of a plurality of layers and based on at least a first set of attributes assigned to an account, data associated with the account;   assign to a compliance administrator, a second set of attributes defining a compliance boundary associated with the compliance administrator;   in response to receiving indication of an action initiated by the compliance administrator using a compliance tool, determine, based on at least a comparison of the first set of attributes to the second set of attributes, the data is within the compliance boundary associated with the compliance administrator; and   authorize access to the data.   
     
     
         22 . The computer-readable storage media of  claim 21 , wherein the compliance boundary includes at least one of a geographical location, a group, and a case. 
     
     
         23 . The computer-readable storage media of  claim 21 , wherein the action includes at least one of a search, a hold, and an export. 
     
     
         24 . The computer-readable storage media of  claim 21 , wherein the set of instructions further cause the processor to, in response to authorizing access to the data, send the data to a client computing device for display in a user interface to the compliance tool. 
     
     
         25 . The computer-readable storage media of  claim 21 , wherein the set of instructions further cause the processor to apply the first set of attributes to a compliance container of a cloud environment. 
     
     
         26 . The computer-readable storage media of  claim 21 , wherein the compliance tool is an electronic discovery tool. 
     
     
         27 . The computer-readable storage media of  claim 21 , wherein the compliance administrator is an electronic discovery manager. 
     
     
         28 . The computer-readable storage media of  claim 21 , wherein the compliance tool is extensible across a plurality of data locations.