Vulnerability Scan Service

Vulnerability Scan ServiceVSS Policy
Product Documentation©2013-2022 Tencent Cloud. All rights reserved.

Page 1 of 9

Vulnerability Scan Service

Copyright Notice©2013-2024 Tencent Cloud. All rights reserved.
Copyright in this document is exclusively owned by Tencent Cloud. You must not reproduce, modify, copy or distributein any way, in whole or in part, the contents of this document without Tencent Cloud's the prior written consent.
Trademark Notice

All trademarks associated with Tencent Cloud and its services are owned by Tencent Cloud Computing (Beijing)
Company Limited and its affiliated companies. Trademarks of third parties referred to in this document are owned bytheir respective proprietors.
Service Statement
This document is intended to provide users with general information about Tencent Cloud's products and services
only and does not form part of Tencent Cloud's terms and conditions. Tencent Cloud's products or services are
subject to change. Specific products and services and the standards applicable to them are exclusively provided for inTencent Cloud's applicable terms and conditions.

©2013-2022 Tencent Cloud. All rights reserved.

Page 2 of 9

Vulnerability Scan ServiceContents
VSS Policy
Privacy Policy
Data Processing And Security Agreement©2013-2022 Tencent Cloud. All rights reserved.

Page 3 of 9

Vulnerability Scan Service

VSS Policy
Privacy Policy：

Last updated 2022-02-28 14:43:57

1. INTRODUCTION
This Module applies if you use Vulnerability Scan Service (“Feature”). This Module is incorporated into the privacy
policy located at Privacy Policy. Terms used but not defined in this Module shall have the meaning given to them in thePrivacy Policy. In the event of any conflict between the Privacy Policy and this Module, this Module shall apply to theextent of the inconsistency.

2. CONTROLLERSHIPThe controller of the personal information described in this Module is as specified in the Privacy Policy.

3. AVAILABILITY
This Feature is available to users globally but primarily intended for users located in the same country/region as theselected service region for optimal performance.

4. HOW WE USE PERSONAL INFORMATION
We will use the information in the following ways and in accordance with the following legal basis:
Personal Information

Use

Legal BasisVulnerability Scanning
Engine Operating Data:
engine operation time,engine operation count,engine operation status,
engine task log data

We use this information to ensure the engine functions
as required, to provide this Feature to you.
Please note that this data is stored in our TencentDB for
Redis (Redis), TencentDB for MySQL (MySQL) andTencentDB for MongoDB (MongoDB) features for thispurpose.

We process thisinformation as it isnecessary for us toperform our contract
with you to provide
the Feature.

Asset Mapping Engine
Operating Data: map ofengine operation

We use this information to provide this Feature to you,including to generate security scan, risk and related

We process thisinformation as it isnecessary for us to©2013-2022 Tencent Cloud. All rights reserved.

Page 4 of 9

Vulnerability Scan Service

reports, provide risk warnings and vulnerability detection
notifications, and provide repair suggestions.
Please note that this data is stored in our Redis, MySQL
and MongoDB features for this purpose.

perform our contract
with you to provide
the Feature.

We process thisUser Quota Data: expiry
date and time, number ofdomain names, number ofIPs, number of APIs

We use this information to calculate your user quota andcharge, for billing purposes.
Please note that this data is stored in our Redis, MySQL
and MongoDB features for this purpose.

Task Log Data: task
name, monitoring type,scanned asset scanningplan, scanning speed,
scanning duration,

We use this information to provide this Feature to you,and for troubleshooting.
Please note that this data is stored in our TencentDB for
Redis, TencentDB for MySQL and TencentDB for

scanning result

MongoDB features for this purpose.

Vulnerability Matching
Data: Vulnerability name,We use this information to provide this Feature to you,and for troubleshooting.

threat level, affectedassets, vulnerability type,time when last foundPlease note that this data is stored in our TencentDB for
Redis, TencentDB for MySQL and TencentDB for
MongoDB features for this purpose.

Port Matching Data:port, vulnerability
response suggestions,protocol, port service

We use this information to provide this Feature to you,and for troubleshooting.
Please note that this data is stored in our TencentDB for
Redis, TencentDB for MySQL and TencentDB forMongoDB features for this purpose.

information as it isnecessary for us toperform our contract
with you to provide
the Feature.
We process thisinformation as it isnecessary for us toperform our contract
with you to provide
the Feature.
We process thisinformation as it isnecessary for us toperform our contract
with you to provide
the Feature.
We process thisinformation as it isnecessary for us toperform our contract
with you to provide
the Feature.

5. HOW WE SHARE AND STORE PERSONAL INFORMATIONAs specified in the Privacy Policy.

6. DATA RETENTION
We will retain personal information in accordance with the following:
Personal Information

Retention Policy©2013-2022 Tencent Cloud. All rights reserved.

Page 5 of 9

Vulnerability Scan Service

Vulnerability Scanning
Engine Operating Data
Asset Mapping Engine
Operating DataStored for 7 days.

Stored for 7 days.

User Quota Data

We retain such data for as long as you use the Feature. When your use of theFeature is terminated, we will delete this data after 7 days.

Task Log Data

We retain such data for as long as you use the Feature. When your use of theFeature is terminated, we will delete this data after 7 days.

Vulnerability Matching

We retain such data for as long as you use the Feature. When your use of theData

Feature is terminated, we will delete this data after 7 days.

Port Matching Data

We retain such data for as long as you use the Feature. When your use of theFeature is terminated, we will delete this data after 7 days.

©2013-2022 Tencent Cloud. All rights reserved.

Page 6 of 9

Vulnerability Scan Service

Data Processing And Security Agreement：

Last updated 2022-02-28 15:06:59

1. BACKGROUNDThis Module applies if you use Vulnerability Scan Service (“Feature”). This Module is incorporated into the Data
Privacy and Security Agreement located at DPSA. Terms used but not defined in this Module shall have the meaning
given to them in the DPSA. In the event of any conflict between the DPSA and this Module, this Module shall apply tothe extent of the inconsistency.

2. PROCESSING
We will process the following data in connection with the Feature:
Personal Information
Basic Website Information: Assetaddress, type, additional time (if moreresources are required after the vulnerabilityscan), authentication status, mock login
status, last scan timeUse
We only process this data for the purposes of providing thisFeature to you. Upon your request, we will also process thisdata for troubleshooting.
Please note that this data is stored in our TencentDB for Redis,
TencentDB for MySQL and TencentDB for MongoDB features
for this purpose.

Basic Host Information: Server IP,

We only process this data for the purposes of providing thisFeature to you. Upon your request, we will also process thisadditional time (if more resources arerequired after the vulnerability scan),data for troubleshooting.
Please note that this data is stored in our TencentDB for Redis,authentication status, last scan time

TencentDB for MySQL and TencentDB for MongoDB features
for this purpose.

Basic API information: API name, API
domain name, authentication method,
authentication status, additional time (if moreresources are required after the vulnerabilityscan), result of last scan, time of last scan

We only process this data for the purposes of providing thisFeature to you. Upon your request, we will also process thisdata for troubleshooting.
Please note that this data is stored in our TencentDB for Redis,TencentDB for MySQL and TencentDB for MongoDB features
for this purpose.

Task Configuration Data: task name, type,

We only process this data for the purposes of providing themonitored asset, scanning plan, scanning
period, scanning speed, last scan, status

Feature to you in accordance to your specific configuration.
Please note that this data is stored in our TencentDB for Redis,
TencentDB for MySQL and TencentDB for MongoDB features©2013-2022 Tencent Cloud. All rights reserved.

Page 7 of 9

Vulnerability Scan Servicefor this purpose.

3. SERVICE REGIONAs specified in the DPSA.

4. SUB-PROCESSORSAs specified in the DPSA.

5. DATA RETENTION
We will store personal data processed in connection with the Feature as follows:
Personal
Information
Basic Website
Information

Basic Host
Information

Basic API
information

Task Configuration
Data

Retention Policy
We retain such data for as long as you use the Feature. You may manually delete suchdata on the Feature. Once you choose to delete such data or terminate your use of theFeature, we will delete this data after 7 days.
We retain such data for as long as you use the Feature. You may manually delete suchdata on the Feature. Once you choose to delete such data or terminate your use of theFeature, we will delete this data after 7 days.
We retain such data for as long as you use the Feature. You may manually delete suchdata on the Feature. Once you choose to delete such data or terminate your use of theFeature, we will delete this data after 7 days.
We retain such data for as long as you use the Feature. You may manually delete suchdata on the Feature. Once you choose to delete such data or terminate your use of theFeature, we will delete this data after 7 days.

You can request deletion of such personal data in accordance with the DPSA.

6. SPECIAL CONDITIONS
You must ensure that this Feature is only used by end users who are of at least the minimum age at which anindividual can consent to the processing of their personal data. This may be different depending on the jurisdiction in©2013-2022 Tencent Cloud. All rights reserved.

Page 8 of 9

Vulnerability Scan Servicewhich an end user is located.

©2013-2022 Tencent Cloud. All rights reserved.

Page 9 of 9