Data Retention Policy

Cortex® Xpanse™ data retention policy.
  • Initial Data Load
    —At the start of a subscription, Cortex® Xpanse™ provides customers with six months of historical data in the customer’s Cortex Xpanse account regarding the customer’s identified exposures (except with respect to cloud-based exposures, for which Cortex Xpanse can only provide thirty days of historical data upon the initial identification of those exposures). Similarly, as new events or newly identified address ranges are discovered during the subscription, Cortex Xpanse provides customers with six months of historical exposure data from the date the range was added to Cortex Xpanse.
  • Ongoing Data Retention
    —Going forward, Cortex Xpanse stores up to 18 months of information in the customer’s Cortex Xpanse account for on-premise exposures and up to 1 month of information for their cloud exposures. Detailed data will be removed after that time, though some metrics and reporting can be preserved. Cortex Xpanse reserves the right to remove data sooner than 18 months depending on the size of a customer’s network. The table below provides examples of the amount of on-premise data available in Cortex Xpanse at different times during a subscription:
Subscription Time
Data Available
0 – 1 month
6 months
6 months
12 months
12 months
18 months
24 months
18 months
You can store the detailed data longer by pulling this information via Cortex Xpanse Expander’s APIs and storing the data themselves.

Recommended For You