Data management system

A computer-implemented method of sharing data between tenants served by a software instance, the method comprising:

• establishing a trusted connection between a first tenant and a second tenant of the software instance;
• establishing a trusted connection between the second tenant and a third tenant of the software instance;
• storing a first set of data at a first cloud-storage resource associated with the first tenant;
• transferring a first portion of the first set of data to a third cloud-storage resource associated with the third tenant;
• transmitting an access request for the first set of data from the third tenant to another tenant, without transmitting an identification of the third tenant;
• granting, by the first tenant, an authorisation of the access request and, in response to the granting of the authorisation, transferring a second portion of the first set of data for storage at the third cloud-storage resource associated with the third tenant via a second cloud-storage resource associated with the second tenant.

A system for sharing data between tenants served by a software instance, the system comprising:

• a connection module arranged to establish a trusted connection between a first tenant and a second tenant of the software instance;
• and
• wherein the connection module is arranged to establish a trusted connection between the second tenant and a third tenant of the software instance;
• a first cloud-storage resource associated with the first tenant arranged to store a first set of data;
• and
• an access management module arranged to generate a first access restriction set by the second tenant, wherein the first access restriction comprises at least one first category of tenant to which the first set of data is not to be transmitted via the second tenant;
• wherein the access management module is arranged to determine if a category of the third tenant matches the at least one first category of tenant in the first access restriction;
• wherein a data transfer module is arranged to transfer at least a first portion of the first set of data to a third cloud-storage resource associated with the third tenant, in response to the access management module determining that the category of the third tenant does not match the first category of tenant in the first access restriction;
• wherein the data transfer module is arranged to prevent transmission of at least the first portion of the first set of data to the third cloud-storage resource associated with the third tenant, in response to the access management module determining that the category of the third tenant matches the first category of tenant in the first access restriction.

A computer-implemented method of sharing data between tenants served by a software instance, the method comprising:

• establishing a trusted connection between a first tenant and a second tenant of the software instance;
• establishing a trusted connection between the second tenant and a third tenant of the software instance;
• storing a first set of data at a first cloud-storage resource associated with the first tenant;
• generating a first access restriction by the second tenant, wherein the first access restriction comprises at least one first category of tenant to which the first set of data is not to be transmitted via the second tenant;
• determining if a category of the third tenant matches the first category of tenant in the first access restriction;
• in response to determining that the category of the third tenant does not match the first category of tenant in the first access restriction, transferring at least a portion of the first set of data to the third tenant;
• and
• in response to determining that the category of the third tenant matches the first category of tenant in the first access restriction, preventing the transfer of at least the portion of the first set of data to the third tenant.