Data retention policy
Customer data is stored for as long as the engagement or contract is active, or for the period of time defined in each customer’s master services agreement.
Customers can submit a data deletion request for all or some of the data stored and processed within the Production environment and used for delivering Wing.Security’s services.
Data archiving and removal policy
Wing.Security’s data is stored and processed on cloud based technologies and as such, disposal takes place by the IaaS, SaaS or PaaS providers upon request. Where applicable, Wing.Security performs its own secure data disposal by a logical deletion from the Database and Infrastructure.
Physical storage devices (e.g. laptop hard drives) are securely shredded or destructed at the end of the device lifecycle.
Data storage policy
Wing.security store Customer Data on a separate per-tenant cloud based database and the data is encrypted at rest using AES-256 encryption.
Data center location(s)
United States
Data hosting details
For each customer data is stored in a separate AWS tenant account.
App/service has sub-processors
no