This Notice describes how the above designated Product processes Personal Data. It provides the information relevant to assess and document privacy relevant aspects of the use of this Product. This Notice and the relevant terms of the Broadcom Privacy Policy are the authoritative statements relating to the Personal Data processing activities and privacy regulatory compliance aspects associated with the use of this Product.
For information on the purpose, features and technical characteristics of the Product, please refer to the Product description and accompanying customer literature available online https://www.broadcom.com/products/cyber- security/information-protection/cloud-application-security-cloudsoc
| Product type: | Hardware | X Software | Service |
|---|---|---|---|
| Deployment model(s): | On-premise | X Cloud (SaaS) | Hybrid |
For information on generative AI usage in SaaS products and a list of exportable data, please see the product SaaS listing.
For information related to certifications, please see our compliance page.
For information related to Broadcom security practices please see our standard security controls.
| Categories of Personal Data | Categories of Data Subjects | Purpose(s) of Processing | Hosting Location(s) | Processing Location(s) |
|---|---|---|---|---|
| Individual identifiers and contact details | Customer admins and end-users | Access to, organization, management and use of the Product | USA, Singapore, Brazil, India, Belgium | USA, Singapore, Brazil, India, Belgium |
| Online identifiers, trackers and location data | Customer admins and end-users | In-Product session and communication management | USA, Singapore, Brazil, India, Belgium | USA, Singapore, Brazil, India, Belgium |
| Electronic communication and network activity data | Customer admins and end-users | In-Product session and communication management | USA, Singapore, Brazil, India, Belgium | USA, Singapore, Brazil, India, Belgium |
| Any data fed to the Product by the customer (can include sensitive data) | Customer admins and end-users | Management and use of such contents in the Product | USA, Singapore, Brazil, India, Belgium | USA, Singapore, Brazil, India, Belgium |
Privacy Enhancing Technologies
Subject to more detailed information provided in the Product description and other customer literature e.g. on optional Product settings and configurations available, the Product has the following technical and organizational capabilities to enhance and protect the privacy of the Personal Data it processes:
| Privacy Objective | Privacy Enhancing Technologies / Measures | Data at rest | Data in transita |
|---|---|---|---|
| Data confidentiality | Access control measures Encryption | X X | NA X |
| Data integrity | Anti-tampering technology Change logging | X | NA NA |
aData in transit encompasses traffic between client systems and SaaS endpoints.
If there are sub-processor(s) involved in the delivery of this Product, the relevant information can be found below:
This list is subject to change in accordance with the statutory requirements and contractual terms applicable.
Proprietary content of Broadcom. This notice is for information only. It is non-contractual and subject to modification at any time at Broadcom’s sole discretion.