Data Retention Policy
| Data Type | Primary Storage | Secondary Storage | Data Retention with at least one type of license still available | Data Retention after both licenses expired |
|---|---|---|---|---|
| Company and Cloud Account Data | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | Data will not be removed | 90 days |
| Events, Cloud Account Activities | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | 1 year | 90 days |
| File data from Buckets or Containers | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | 24 hours | 90 days |
| Cloud Account Credential Data | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | Data will not be removed | 90 days |
| Cloud traffic raw data | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | 7 days | 90 days |
| Cloud resources, audit logs, and reports generated | Encrypted and stored at AWS RDS and Elasticsearch Database | AWS RDS and Elasticsearch backup snapshots | Data will not be removed | 90 days |
Data Type Details
Company and Cloud Account Data - Cloud account profile information that is located on FortiCloud. For example, account holder information such as name, address, phone, email, etc.
Events, Cloud Account Activities - Cloud account activities and events generated in INSIGHTS > Threat > User Activity.
File data from Buckets or Containers - Cloud storage account or container data that is being monitored by FortiCNP. The list of storage data can be view at ADMIN > Cloud Accounts > Storage.
Cloud Account Credential Data - Cloud account credential data are credential data being stored for accessing cloud accounts. For example, access tokens that are used to retrieve cloud account data, service account private key, etc.
Cloud traffic raw data - Cloud account VPC flow logs that provides data for Traffic feature in Resource Risk Insight.
Cloud resources, audit logs, and reports generated - Cloud resources are account resource data in INSIGHT > Risk > Resources. Audit logs shows the user activities on FortiCNP, located at ADMIN > Audit Log. Reports are Compliance, Findings, and User Activity reports generated for the cloud accounts.