Cortex Xpanse product security and privacy protection practices align with Palo Alto Networks security and privacy standards. You can read more about these in our Trust Center https://www.paloaltonetworks.com/legal-notices/trust-center.
The backend processing of Cortex Xpanse global scan data occurs in Amazon Web Services (AWS) and Google Cloud Platform (GCP) in the United States. User data is hosted in GCP and is available in a number of locations including United States, Netherlands, Singapore, Canada, Japan, Australia, Germany, India, United Kingdom, Switzerland, Poland, Qatar, and Taiwan.
Cortex Xpanse retains data for 18 months.
For more details, refer to the Expander Privacy Datasheet at https://www.paloaltonetworks.com/resources/datasheets/product-privacy-datasheets.