[{"data":1,"prerenderedAt":281},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Ftrust\u002Fdata-governance":97,"docs-surround-\u002Fen-gb\u002Ftrust\u002Fdata-governance":276},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,71,81,91],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74,"children":75},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[76,77],{"title":72,"path":73,"stem":74},{"title":78,"path":79,"stem":80},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":82,"path":83,"stem":84,"children":85},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[86,87],{"title":82,"path":83,"stem":84},{"title":88,"path":89,"stem":90},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":92,"path":93,"stem":94,"children":95},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[96],{"title":92,"path":93,"stem":94},{"id":98,"title":88,"body":99,"description":267,"extension":268,"meta":269,"navTitle":270,"navigation":271,"path":89,"roleNote":271,"seo":272,"sitemap":273,"stem":90,"updated":274,"__hash__":275},"docs\u002Fen-gb\u002Ftrust\u002F1.data-governance.md",{"type":100,"value":101,"toc":257},"minimark",[102,107,136,140,144,163,167,232,235,239,242,246,254],[103,104,106],"h2",{"id":105},"who-can-see-what","Who can see what",[108,109,110,122,130],"ul",{},[111,112,113,117,118,121],"li",{},[114,115,116],"strong",{},"Inside an organisation."," A person's role in an organisation decides what they may see and change there. Each role includes every role below it. See ",[119,120,24],"a",{"href":25},".",[111,123,124,127,128,121],{},[114,125,126],{},"ZoneAudit results."," The scans and findings of a domain are seen only by the organisation that holds the verified claim on it, or by someone given an access code for one scan. See ",[119,129,45],{"href":46},[111,131,132,135],{},[114,133,134],{},"CobraSphere administrators."," An administrator holds that role on their own CobraSphere account. It is given and taken away one account at a time, and every change is logged with who it was for and the roles before and after.",[103,137,139],{"id":138},"email-cobrasphere-sends","Email CobraSphere sends",[141,142,143],"p",{},"The products send their email through one mail service, and it keeps a record of every email it sends.",[108,145,146,149,152,160],{},[111,147,148],{},"The record holds the sender, the recipients, the subject, the body, when it was sent and whether sending worked.",[111,150,151],{},"Attachments are never stored. Only their file names are kept.",[111,153,154,155,159],{},"Sign-in codes and ZoneAudit access codes are masked in the stored copy. The person receives the email as it was sent, and the record shows ",[156,157,158],"code",{},"[masked]"," in place of the code.",[111,161,162],{},"Only the Admin console, used by CobraSphere administrators, can read the record.",[103,164,166],{"id":165},"codes-and-how-long-they-work","Codes and how long they work",[168,169,170,186],"table",{},[171,172,173],"thead",{},[174,175,176,180,183],"tr",{},[177,178,179],"th",{},"Code",[177,181,182],{},"How long it works",[177,184,185],{},"What is stored",[187,188,189,201,211,221],"tbody",{},[174,190,191,195,198],{},[192,193,194],"td",{},"Sign-in code, sent by email",[192,196,197],{},"60 minutes, and stops after 5 wrong tries",[192,199,200],{},"A keyed hash, never the code",[174,202,203,206,209],{},[192,204,205],{},"Code to confirm an added email address",[192,207,208],{},"15 minutes, and stops after 5 wrong tries",[192,210,200],{},[174,212,213,216,219],{},[192,214,215],{},"Sign-in code between CobraSphere sites",[192,217,218],{},"About a minute, and works once",[192,220],{},[174,222,223,226,229],{},[192,224,225],{},"ZoneAudit access code",[192,227,228],{},"30 days unless set otherwise, 90 days at most, and can be withdrawn early",[192,230,231],{},"A hash, never the code",[141,233,234],{},"A ZoneAudit access code opens one scan of one domain. Only a hash of it is kept, so the code cannot be read back.",[103,236,238],{"id":237},"where-data-is-held","Where data is held",[141,240,241],{},"The CobraSphere products and their databases run in the UK and the EU.",[103,243,245],{"id":244},"how-long-data-is-kept","How long data is kept",[108,247,248,251],{},[111,249,250],{},"A sign-in that was started but never finished is deleted once its code has expired, by a job that runs every day.",[111,252,253],{},"The record of sent email is kept with no end date for now.",[141,255,256],{},"Other retention periods are being set and will be published here.",{"title":258,"searchDepth":259,"depth":259,"links":260},"",3,[261,263,264,265,266],{"id":105,"depth":262,"text":106},2,{"id":138,"depth":262,"text":139},{"id":165,"depth":262,"text":166},{"id":237,"depth":262,"text":238},{"id":244,"depth":262,"text":245},"Who can see what, what is recorded about the email CobraSphere sends, how long codes work, where data is held and how long it is kept.","md",{},null,true,{"title":88,"description":267},{"loc":89},"2026-11-10","sG8EVAWytiNFXXp5YzmABg1Te6exwa6_c_2nmW5gu8M",[277,279],{"title":82,"path":83,"stem":84,"description":278,"children":-1},"How CobraSphere looks after access and data.",{"title":92,"path":93,"stem":94,"description":280,"children":-1},"What changed in each CobraSphere product.",1794331643102]