Data Retention Policy - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-26
End_of_Life
EoL
Category
User Guide
Abstract

Cortex Xpanse data retention policy.

  • Initial Data Load—At the start of a subscription, Cortex Xpanse provides customers with six months of historical data in the customer’s Cortex Xpanse account regarding the customer’s identified exposures (except with respect to cloud-based exposures, for which Cortex Xpanse can only provide thirty days of historical data upon the initial identification of those exposures). Similarly, as new events or newly identified address ranges are discovered during the subscription, Cortex Xpanse provides customers with six months of historical exposure data from the date the range was added to Cortex Xpanse.

  • Ongoing Data Retention—Going forward, Cortex Xpanse stores up to 18 months of information in the customer’s Cortex Xpanse account for on-premise exposures and up to 1 month of information for their cloud exposures. Detailed data will be removed after that time, though some metrics and reporting can be preserved. Cortex Xpanse reserves the right to remove data sooner than 18 months depending on the size of a customer’s network. The table below provides examples of the amount of on-premise data available in Cortex Xpanse at different times during a subscription:

Subscription Time

Data Available

0 – 1 month

6 months

6 months

12 months

12 months

18 months

24 months

18 months

You can store the detailed data longer by pulling this information via Cortex Xpanse Expander’s APIs and storing the data themselves.