Data Retention Policies

As a data security and privacy company, protecting customer data is the top priority of Virtru. One of the most important ways to protect customer data is to properly purge it from our systems when no longer in use or needed to fulfill our obligations to our users. We cannot expose what we do not hold.

Virtru Audit Records

Virtru audit records are collected for all user activity and fielded to Virtru administrators for their organizations. This data is available through the Control Center & Audit API and the following data retention policies will be applied to each.

Service	Retention Period
Control Center	90 days
Audit API	1 year

Customers requiring longer data retention periods may use the Audit API to export their audit data to the SIEM or storage solution or their choice. Refer to the audit export documentation for more information on exporting logs using the Audit API.