Types of information stored

The table below describes the types of information that SDS for C&M stores and how long such information is retained:

Data	Type	Location and retention duration
User data for access management	First name, last name and e-mail address, Device location (country).	Operating system logs: 1 year Daily backups of databases: 7 days SDMC user logs: 30 days
Event logs for audit and monitoring	User actions, date and time, E-mail addresses (senders and recipients), File name (no content), Device: operating system, model, name and IP address.	Operating system logs: 1 year Daily backups of databases: 7 days SDMC user logs: 30 days
System administration logs	Software patches and updates Account creation and deletion, Operating system management operations, Backup and restoration operations, Server operations and maintenance.	Operating system logs: 1 year Daily backups of databases: 7 days SDMC user logs: 30 days
End user keys	End user keystore	As long as the user exists in SDMC
External user keys	End user keys	As long as the user exists in SDMC