Data Retention Policy
FortiCASB does not store personal or sensitive data from the cloud applications, the sole purpose of retaining any information is for security monitoring to enhance user experience with our product.
When you delete an account of a cloud application, all relevant cloud account data will be removed. At the time when your license expires and you decide not to renew, only user preference data such as Company and Business Unit information will be retained, all other types of data will be removed after 90 days.
User Data Retention Policy
Company - The company data that hold all business units on FortiCASB.
Business Unit - The business unit data that hold cloud application account data.
Audit Logs - The administrative logs of all user activities on FortiCASB.
| Data Type | Data Retention with Active License | Data Retention with Expired License |
|---|---|---|
| Company | Will not remove. | Will not remove. |
| Business Unit | Will not remove. | Will not remove. |
|
Audit Logs |
Will not remove. |
Removed after 90 days |
Cloud Account Data Retention Policy
Activity and Alert- Activity and alert data refer to the data generated by cloud account user activities and the alerts triggered by user activities.
Users - Cloud account users metadata.
Documents on Cloud Account- Documents pulled from the cloud accounts to FortiCASB.
Installed Cloud App- Cloud account OAuth data.
Report- C-level, Compliance, and Shadow IT reports generated through Report page.
| Data Type | Data Retention with Active License | Data Retention with Expired License |
|---|---|---|
| Activity and Alert | 1 year | Removed after 90 days |
|
Users |
Will not remove |
Removed after 90 days |
| Documents in Cloud Account | Will not remove. | Removed after 90 days |
| Installed Cloud App | Will not remove. | Removed after 90 days |
| Report | Will not remove. | Removed after 90 days |