Data & Privacy on DefectDojo Trust Center

Cryptographic Controls Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this policy is to ensure the proper and effective use of encryption to protect the confidentiality and integrity of confidential information. In addition, it informs all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations with regards to the management and use of encryption for all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.

Data Classification Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this policy is to inform all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations with regards to the data classification of all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.

Data Retention Policy

Thu, 08 Jan 2026 00:00:00 +0000

1. Purpose

The purpose of this policy is to ensure the appropriate retention of data in accordance with applicable legislative, regulatory, and contractual requirements. It also informs all DefectDojo employees and external parties with access to DefectDojo equipment, systems, or networks (DefectDojo Staff) of their obligations regarding the retention of data stored across all systems, networks, IT assets, and licensed software owned, operated, or used by DefectDojo.