Logs, data access and privacy
Monitoring data, security events and logs are stored in the EU, in the Netherlands, and processed in accordance with the GDPR.
Log collection
We collect your server's system logs on OpenObserve, a dedicated log collection and analysis platform. Collection is enabled only with your consent.
Info
Logs may contain sensitive data. For this reason, the log collection agent is not installed and logs are not transferred without your consent.
What is collected
| System | Logs |
|---|---|
| Linux | journald, /var/log/syslog |
| Proxmox VE | journald, /var/log/syslog |
| Windows Server | System, Application and Security event logs |
Why logs are collected
- incident analysis;
- root cause analysis (RCA);
- security event investigation;
- protection against malware that can wipe the server's local logs.
Consent to centralized log collection
You will be asked for consent to log collection while the service is being enabled. You can withdraw your consent at any time with a standard ticket request.
Log retention
Logs are kept for 1 month on Starter, 3 months on Advanced and 6 months on Premium. After that, they are deleted automatically.
Access to logs
- Only INTROSERV engineers have access to the logs.
- You can get a log export on request or by arrangement.
When the server management subscription is canceled
- the collected logs are deleted;
- the log collection agent is removed from the server.
Warning
If log collection is enabled, do not disable system logging: journald on Linux or Windows Event Log on Windows Server. The agent reads logs from these sources. Without them, no new records reach OpenObserve, and incident analysis and RCA will be incomplete.
Data access and privacy
Data collected by the agents
| Agent | Data |
|---|---|
| Zabbix | server metrics |
| Wazuh | security events, file hashes, lists of installed packages |
| OpenObserve | logs, only with your consent |
Access to the server
- Engineers work on the server through a separate engineer account.
- You can see this account and disable it at any time, but it will then need to be re-enabled for any work to be done.
- Your credentials and passwords remain confidential.
Application data
Engineers do not access your application data unless a task agreed with you requires it.
Data retention
| Data | Retention |
|---|---|
| Logs | 1, 3 or 6 months depending on the plan, then deleted automatically |
| Monitoring metrics | detailed data for 7 to 31 days, trends for 365 days |
When the service is canceled, the collected data is deleted. See the Getting started and plan changes document.
