Personal Data Protection Mechanism

Updated on 2023-12-05 GMT+08:00

View PDF

To ensure that your personal data, such as the username, password, and mobile phone number, will not be leaked or obtained by unauthorized or unauthenticated entities or people, DSC controls access to the data and records logs for operations performed on the data.

Personal Data

Table 1 lists the personal data generated or collected by DSC.

**Table 1** Personal data
Type	Source	Modifiable	Mandatory
Tenant ID	Tenant ID in the token used for authentication when an operation is performed on the console Tenant ID in the token used for authentication when an API is called	No	Yes
Password	Entered by the tenant on the console	Yes	Yes. When scanning, desensitizing, and injecting watermarks to database data, DSC needs to use the database password to connect to the database and obtain data.

Storage Mode

Tenant ID is not sensitive data and can be stored in plaintext.
Database password: encrypted for storage.

Access Permission Control

Users can view only logs related to their own services.

Log Records

DSC records logs for all operations, such as modifying, querying, and deleting, performed on personal data. The logs are uploaded to Cloud Trace Service (CTS). You can view only the logs generated for operations you performed.

Previous topic: Constraints

Next topic: Permissions Management