INTRODUCTION

This informational document addresses frequently asked questions Bentley receives, particularly from EU accounts, regarding Bentley’s data protection practices and compliance program, specifically regarding Subscription Entitlement Service. Bentley aims to provide our users with clear and transparent information so that you have the necessary information to evaluate our offerings.

DISCLAIMER

The information contained in this document represents the current view of Bentley on the issues discussed as of the date of publication. Bentley is publishing this document for informational purposes only. Bentley makes no warranties, express, implied, or statutory, as to the information in this document and cannot guarantee the accuracy of any information presented after the date of publication.

PUBLISHED DATE: November 2019

BENTLEY LICENSING AND USER MANAGEMENT

Security, Privacy, and Data Protection. Security, privacy, and data protection are embedded into Bentley’s business and organization. We have implemented safeguards to protect the fundamental rights of everyone whose personal data is processed by Bentley. Additionally, Bentley has adopted a global data protection and privacy policy to comply with applicable data protection laws. The policy outlines global standards for handling personal data in compliance with the EU General Data Protection Regulation (GDPR) and other data protection and privacy laws.

Use of Cloud Technology. Bentley’s Licensing and User Management utilize cloud technology. Bentley cloud offerings are designed with operational best practices and robust controls to deliver compliance that you can rely on. Bentley partners with Microsoft Azure, the leading cloud service provider, so that you can benefit from data centers and network architecture built to satisfy the most stringent industry standards and country-specific requirements. You may view or request to view Bentley’s compliance standards and information that attests to the security and dependability of Bentley’s named cloud services offerings, including SOC and ISO accreditations and third-party audit reports on our Trust Center.

Bentley User Registration and Sign In. To enhance security for Bentley and our users, Bentley requires user registration. User registration is required to utilize Subscription Entitlement Service (described below), to qualify for the Earned Value Discount, and to take advantage of ProjectWise Connection Services, Adaptive Learning Services, and Personal Mobility.

The data required to register is: name, email address, organization (company name), and country.
Individual users may choose to complete additional optional fields, such as profession.

The most efficient mechanism of registering users is federation with your organization’s identity provider. Alternatively, administrators can facilitate user registration in Bentley’s User Management.

Bentley Licensing Administration Services. Bentley’s support of License Administration Services is documented in its Support Policy.

Subscription Entitlement Service. Subscription Entitlement Service is Bentley’s next-generation license management, empowering users and enterprises to maximize the value of their Bentley investment. Subscription Entitlement Service provides improved administrative capabilities, such as near real-time usage monitoring, custom license alert notifications, and user-level license management. Users will sign in to activate their applications, eliminating activation keys and resulting in more secure administration and faster on-boarding of new users. Powered by Microsoft Azure, Subscription Entitlement Service is globally available and embedded in new releases of Bentley CONNECT Edition applications (desktop and cloud services). Applications will feature a “CL” in the product version name within Software Downloads. Usage information collected via Subscription Entitlement Service captures the following data:

• User ID (System Identifier for email address provided with user registration)
• Bentley Application Product ID
• Bentley Application Product Version Number
• Organization ID
• Project ID (if applicable)
• Country
• Windows Machine Name
• Windows Account User Name
• Usage Type (e.g. Production or Trial)
• Bentley Application Start and End Time/Date

SELECTserver (Hosted). Hosted in Microsoft Azure, SELECTserver Hosted utilizes Bentley’s legacy licensing technology (activation keys). No user sign-in is required, but only older versions (Non-“CL”) are supported.

• Bentley Application Product ID
• Bentley Application Product Version Number
• Windows Machine Name
• Windows Account User Name
• Activation Key
• Project ID (if applicable)
• Usage Type (e.g. production or trial)
• Bentley Application Start and End Time/Date
• SELECTserver identification of hosted server (SELECTserver serial number, version)

SELECTserver (Deployed).  Hosted on premises within an account, SELECTserver Deployed is Bentley’s oldest license management technology.

• Product ID
• Product Version Number
• Windows Machine Name
• SELECT site ID
• Activation Key
• Hash Machine Name
• Hash User Name
• SELECTserver identification info (SELECTserver serial number, version)
• Max usage statistics (processed data)

Secure Storage of Personal Data. Bentley uses a combination of technology, physical security, and process controls to help protect personal data from unauthorized access, use, or disclosure. User personal data is stored in the United States with our best-in-class service provider, Microsoft Azure. Microsoft Azure leads the industry in establishing security and privacy requirements and exceeding them. You may view their broad set of international and industry-specific compliance statements and certifications, as well as third-party audits on its Trust Center.

Cross-border Transfer of Personal Data. Bentley is a global company and transfers your personal data across national borders in compliance with laws that apply to that data. To learn more about Bentley’s data transfer practices, please read the Data Processing Addendum and Bentley’s notice regarding its Certification Under the Data Privacy Framework Program.

All personal data is transferred via Transport Layer Security so that all transmissions are secure and encrypted.

Privacy Compliance and GDPR. Bentley welcomes the General Data Protection Regulation as a monumental privacy regulation that harmonizes data protection laws across the EU and strengthens protections for EU residents. For more information on Bentley’s GDPR compliance, please review Bentley’s GDPR Compliance Statement.