Trust
Data governance
Who can see what, what is recorded about the email CobraSphere sends, how long codes work, where data is held and how long it is kept.
Who can see what
- Inside an organisation. A person's role in an organisation decides what they may see and change there. Each role includes every role below it. See Roles.
- ZoneAudit results. The scans and findings of a domain are seen only by the organisation that holds the verified claim on it, or by someone given an access code for one scan. See ZoneAudit.
- CobraSphere administrators. An administrator holds that role on their own CobraSphere account. It is given and taken away one account at a time, and every change is logged with who it was for and the roles before and after.
Email CobraSphere sends
The products send their email through one mail service, and it keeps a record of every email it sends.
- The record holds the sender, the recipients, the subject, the body, when it was sent and whether sending worked.
- Attachments are never stored. Only their file names are kept.
- Sign-in codes and ZoneAudit access codes are masked in the stored copy. The person receives the email as it was sent, and the record shows
[masked]in place of the code. - Only the Admin console, used by CobraSphere administrators, can read the record.
Codes and how long they work
| Code | How long it works | What is stored |
|---|---|---|
| Sign-in code, sent by email | 60 minutes, and stops after 5 wrong tries | A keyed hash, never the code |
| Code to confirm an added email address | 15 minutes, and stops after 5 wrong tries | A keyed hash, never the code |
| Sign-in code between CobraSphere sites | About a minute, and works once | |
| ZoneAudit access code | 30 days unless set otherwise, 90 days at most, and can be withdrawn early | A hash, never the code |
A ZoneAudit access code opens one scan of one domain. Only a hash of it is kept, so the code cannot be read back.
Where data is held
The CobraSphere products and their databases run in the UK and the EU.
How long data is kept
- A sign-in that was started but never finished is deleted once its code has expired, by a job that runs every day.
- The record of sent email is kept with no end date for now.
Other retention periods are being set and will be published here.