Securing your data in CIS
To ensure that you can securely manage your data when you use IBM Cloud® Internet Services, it is important to know exactly what data is stored and encrypted and how to delete any stored personal data.
How your data is stored and encrypted in CIS
CIS interacts with Cloudflare services using a channel that is fully encrypted end-to-end using Transport Layer Security (TLS) 1.2. CIS does not store any customer data. Configuration data about your specific CIS configuration is encrypted in transit and at rest. CIS configuration data is deleted on your request through the UI, CLI, or API.
Protecting your sensitive data in CIS
All data related to CIS configuration is not considered sensitive data. The configuration data is encrypted at rest. No customer-managed keys are managed by the CIS offering. Therefore, neither Key Protect nor Hyper Protect Crypto Services are used.
Working with customer-managed keys for CIS
No customer-managed keys are managed by the CIS offering.
Deleting your data in CIS
The CIS configuration data is deleted on request through the UI, CLI, or API.
Deleting CIS instances
The CIS data retention policy describes how long your data is stored after you delete the service. The data retention policy is included in the CIS service description, which you can find in IBM Cloud Terms. When a CIS instance is deleted by the UI, CLI, or API, the instance data is retained for seven days from deletion.
Before you delete an instance, all the domains in the instance must be removed.
Deleting the CIS instance removes all data.
Restoring deleted data for CIS
CIS can currently restore the deleted instance. After you delete an instance of CIS, you can restore the deleted service instance within the data retention period of seven days. After the seven-day period expires, the service instance is permanently deleted.
To view which service instances are available for restoration, use the ibmcloud resource reclamations
command. To restore a deleted service instance, use the ibmcloud resource reclamation-restore
command.