Documentation contents
AarSOC · Your data
Retention by offer
How long AarSOC keeps your logs by offer, the archive on your own site, exporting your data and what happens on termination.
On this page
Online retention
Your logs stay online, queryable in real time, for your offer’s period:
| Offer | Online retention |
|---|---|
| Sentinelle | 6 months |
| Gardien | 12 months |
| Citadelle | 24 months |
| Souveraine | 24 months |
The duration is that of your offer, written into the contract, and cannot be modified without bilateral agreement.
Archive on your site
With Citadelle and Souveraine, a copy of your events and alerts can also be kept on your own site.
Exporting your data
- Your incidents, as CSV.
- With Citadelle and Souveraine, the archive of your events, as JSON.
- Alerts follow the open format of our detection engine.
On termination
- Your access is closed and collection stops.
- You can export your data (see above).
- Your data is then deleted as set out in the contract.
- Our daily backups that still contain it expire on their own within the following 30 days: the deletion certificate is sent to you at that point.
What belongs to you
You keep your exported logs, reports and configurations. The detection rules developed for your context belong to you and can be exported: they are standard rules of our detection engine, in an open format.