Data Protection Controls

CBH takes many measures to keep data stored in CBH secure and reliable.

**Table 1** CBH data protection controls and features
Data Protection Measure	Description
Protection for data at rest	CBH encrypts sensitive data in your website traffic to keep the data from leakage.
Protection for data in transit	Data is encrypted when it is transmitted between microservices to prevent leakage or tampering during transmission. CBH keeps your configuration data secure as the configuration data is transmitted over HTTPS.
Data isolation	CBH isolates its tenant zone from its management plane. Operation permissions for CBH are isolated by user. Your policies and logs are isolated from those of others.
Data destruction	To prevent information leakage caused by residual data, Huawei Cloud sets different retention periods based on the customer level. If the customer does not renew the subscription or recharge the account after the retention period expires, the data stored in the cloud service will be deleted and the cloud service resources will be released.