Where your data sits, and who can reach it
Cadence is hosted in three regions and your account is pinned to one of them. Data is encrypted in transit and at rest, and the keys are rotated on a schedule we publish rather than on request.
Access
Every role in your account maps to a named permission set, and every permission change is written to an audit log you can export. Our own staff have no standing access to customer data; access is granted per incident, expires in four hours, and appears in the same log you read.
What we hold
We keep event data for as long as your plan says and no longer. Deletion is a single request and completes within seven days across every replica, including backups — we do not keep a copy “for analytics”.
What we will tell you
Every incident that touches customer data gets a written note within seventy-two hours, whether or not a regulator requires one. Past notes stay published.