Retention policies
The following section describes the GravityZone data retention policies.
Feature | Retention policy |
|---|---|
GravityZone notifications | The default retention policy is 30 days. However, you can set your own values. The maxim allowed value is 365 days. For information on how to change the default policy, please see Configuring notification settings. |
GravityZone incidents, events and alerts | Incident, event and alert data is available for 90 days. This period can be extended by enabling either the GravityZone EDR 180 days Data Retention Add-on, or GravityZone EDR 365 days Data Retention Add-on. This option is not compatible with MSP subscription plans. |
Endpoint Detection and Response (XDR) Raw Events | Raw Events becomes available when activating one of the following add-ons: GravityZone EDR 90 days Data Retention Add-on, GravityZone EDR 180 days Data Retention Add-on, or GravityZone EDR 365 days Data Retention Add-on. This add-on also sets the retention period for Raw Events. |
GravityZone data used for reporting | Data in GravityZone that is leveraged for reporting is available for 2 years. |
Sandbox Analyzer samples | Samples submitted to Cloud Sandbox Analyzer are deleted immediately after detonation. |
Sandbox Analyzer reports | The HTML reports using data from samples submitted to Cloud Sandbox Analyzer are available for 365 days. |
GravityZone Security for Email reports | GravityZone Security for Email report information is available for 3 months after a report has been generated from the console. After this period has passed, reports will be archived and you can access them by going to GravityZone Security for Email console > Analytics > Log archives. |
Security for Mobile threat and console data | Security for Mobile data is retained by default for the duration of the contract and 60 days after the service expires. This includes device data and configuration data. The threat data and any threat detection will be retained for 90 days unless the service is deleted with respect to a service expiry as stated above. |
Integrity Monitoring data retention add-on | In addition to the add-on license, Bitdefender offers a data retention add-on, which can store your events in GravityZone for 90 days, 180 days or 1 year. The default value of the data retention add-on is 7 days. NoteYou can only have one data retention add-on at a time. When the Integrity Monitoring add-on license is removed, the data retention add-on is also removed. When the data retention add-on expires, the retention is reduced to 7 days if the Integrity Monitoring add-on license is still valid. |