tencent cloud

All product documents
Tencent Container Security Service
Data Processing And Security Agreement
Last updated: 2023-04-03 14:53:02
Data Processing And Security Agreement
Last updated: 2023-04-03 14:53:02

1. BACKGROUND

This Module applies if you use Tencent Container Security Service (“Feature”). This Module is incorporated into the Data Processing and Security Agreement located at (“DPSA”). Terms used but not defined in this Module shall have the meaning given to them in the DPSA. In the event of any conflict between the DPSA and this Module, this Module shall apply to the extent of the inconsistency.

2. PROCESSING

We will process the following data in connection with the Feature:
Personal Information
Use
Asset Basic Data: Basic information of your servers, containers, images and clusters (asset fingerprint information (resource monitoring, accounts, ports, software applications, processes, databases, web applications, web services, web frameworks, web sites, Jar packages startup services, scheduled tasks, environment variables, kernel modules), basic information of image repository (image repository address, repository type, image name, image ID, image version, image size, security risks (including security vulnerabilities, Trojan viruses, sensitive information), construction history)
We only process this data for the purposes of providing the Feature to you.
Please note that this data is stored and backed up in our TencentDB for MongoDB (MongoDB) and TencentDB for MySQL (MySQL) features, temporarily stored and backed up in our Cloud Object Storage (COS) feature, and integrated with the relevant Hosting Service (as defined in the Privacy Policy module for this Feature) you are subscribed to. If you have purchased our Tencent Kubernetes Engine (TKE) cluster, basic information of image repository is also shared with us upon your authorization, for the purpose of providing the Feature to you (including to conduct security checks).
Console Configuration Data:
Configuration of image, cluster, vulnerability, baseline, file, log detection: regular detection, ignore vulnerability / baseline, your confirmation to trust file or isolate file, intercept process, intercept image, intercept container network access)
Whitelist configuration for container escape, reverse shell, file check, abnormal process, file tampering, high-risk system drop call and other intrusion prevention features: whitelist conditions, effective mirror rangeOther configuration information: automatic server upgrade protection settings, automatic renewal settings, alarm settings
We only process this data for the purposes of providing the Feature to you in accordance to your specific configuration.
Please note that this data is stored and backed up in our TencentDB for MongoDB (MongoDB) and TencentDB for MySQL (MySQL) features, and integrated with the relevant Hosting Service (as defined in the Privacy Policy module for this Feature) you are subscribed to.

3. SERVICE REGION

As specified in the DPSA.

4. SUB-PROCESSORS

As specified in the DPSA.

5. DATA RETENTION

We will store personal data processed in connection with the Feature as follows:
Personal Information
Retention Policy
Asset Basic Data
We retain such data for a minimum of 180 days. We retain such data until you terminate your use of the relevant Hosting Service(s), in which case we will temporarily retain this data in our COS feature and delete the same (i) 30 days thereafter or (ii) after the minimum number of days required to meet the 180-days minimum data retention threshold (as applicable).
Console Configuration Data
Stored until you request for deletion, upon which such data will be deleted within 30 working days. Where you do not request for deletion, such data will be deleted after 1 month of termination of your use of this Feature, unless otherwise required by applicable data protection laws.
You can request deletion of such personal data in accordance with the DPSA.

6. SPECIAL CONDITIONS

You must ensure that this Feature is only used by end users who are of at least the minimum age at which an individual can consent to the processing of their personal data. This may be different depending on the jurisdiction in which an end user is located.
This Feature is not intended for the processing of sensitive data. You must ensure that this Feature is not used to transfer or otherwise process any sensitive data by you or your end users.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon