Primary sources
Privacy Policy
How personal data is collected, used, disclosed, and protected.
Data Retention Policy
Retention periods for account data, service configuration, certificates, traffic records, analytics, support records, and backups.
Sub-Processors
The current third parties used to provide the Services, their purposes, and locations. The source page, which now includes processing locations and available proxy regions, was last updated September 1, 2026.
Data Processing Agreement
The processor terms that apply to customer data, including the EU Standard Contractual Clauses, UK Addendum, breach notification, sub-processor notice, and deletion commitments. Countersigned copies are available on request.
Service Level Agreement
The uptime commitment, exclusions, service credits, and support response targets for Enterprise-plan customers.
Terms of Use
The agreement governing use of the Services.
Live status
Current operational status. This is separate from the documentation changelog and should be used for incident information.
Retention snapshot
This summary is for discovery. The Data Retention Policy, last updated October 29, 2026, is the primary source and contains additional categories and exceptions.
- Request-level records, including client IP addresses
- 30 days by default, or between 14 and 365 days by agreement
- Security event and IP reputation data
- Up to 90 days
- Audit trail of security rule changes, including the IP address or other value each rule targets
- 365 days, including after the rule or cluster is deleted
- Trace requests a customer sends, including request and response bodies up to 64 KB each
- 30 days
- Connection totals per client IP address, counted per minute, hour and day
- Up to 365 days
- Connection totals per IP network prefix (/24 for IPv4, /56 for IPv6), counted per minute, hour and day
- Up to 730 days
- Aggregated traffic statistics that do not identify individuals
- Up to 24 months
- Deleted production data in rolling backups
- Ages out within 60 days
- Deletion requests
- Completed within 30 days, except where law requires specific records to be retained. Traffic logs, analytics and security records are deleted as their retention periods expire.
SLA scope
The published SLA states a 99.9% monthly Actual Availability commitment for customers with an Enterprise plan during the applicable subscription term. Its definitions, exclusions, credit schedule, request process, and support targets are part of the agreement; do not treat 99.9% as an unqualified promise for every plan.
Machine-readable sources
- Product facts JSON contains scoped pricing, company, retention, sub-processor, and SLA facts with source URLs.
- OpenAPI 3.1 describes the customer-facing API.
- Documentation changelog Atom feed reports changes to public discovery material, not service uptime.