ai insights privacy datasheet.pdf
About Check Point AI Insights
Check Point AI Insights is a powerful feature designed to enhance security management by analyzing customers’ existing security policies and providing actionable recommendations for tightening security posture.
By streamlining the access policy cleanup process and threat prevention optimization, AI Insights reduces exposure levels, improves performance, helps organizations maintain a robust security framework, and ensures ongoing enforcement of security rules.
How Does Check Point Comply with Applicable Data Protection Regulations?
At Check Point, ensuring customer privacy and security remains our foremost concern, with the trust our customers place in our services being one of our most valued assets.
Privacy by Design. We operate under the principle of privacy by design, prioritizing the protection of personal data and privacy throughout the entire lifecycle of our products and services. Our commitment to privacy is reflected in our policies, procedures, and the way we do business. For more details, visit our Privacy Policy and our Trust Point.
Disaster Recovery. We maintain comprehensive plans and procedures for disaster recovery and business continuity.
Transfers. Check Point has adopted an intercompany agreement for transfers of data between various entities, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Check Point Software Technologies, Inc. has self-certified its compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (DPF).
What Types of Personal Data Does AI Insights Process?
- Administrators’ details: username
AI Insights processes the following categories of personal data:
Security policy: rules, objects, IP addresses, and other configuration elements as defined by the customer (not personal data by default)
Threat Prevention policy: gateways, rule base, profiles, protection overrides, CPdiag data, processor peak performance occurrences, and rule hit count
Log telemetry metadata: limited traffic insights used for analytics.
Security policy configurations do not inherently contain personal data. However, if the customer includes personal data within policy rules or objects, AI Insights may process that information as part of its analysis.
Data may be shared with AI Insights throughout the subscription term.
AI Insights analyzes access and threat prevention policies against actual network traffic to generate recommendations on how to optimize and strengthen security policy. For more information on the purposes for which we process personal data, please visit our Privacy Policy.
Why Does AI Insights Process Personal Data?
What are the Retention Periods?
| Data Type | Retention Period |
|---|---|
| Administrator's username | Subscription term plus three (3) months following expiration. |
| log telemetry metadata | 400 days |
| Personal data that may be included in security policy rules and objects | 400 days |
Where is Personal Data Stored?
Personal data is stored in Check Point cloud hosting environments, including infrastructure provided by third-party cloud service providers. The hosting locations available are EU, US, Canada, Australia, and India. The location is selected according to the customer’s choice during the onboarding process, which aligns with the location of their tenant.
Sub-Processors
Check Point engages third-party Sub-processors in connection with the provision of Check Point’s products and services. The list of Sub-processors is available at our Sub-Processors Page.
Authorized Access to Personal Data
Customer Access
- Access to any data is restricted to authorized representatives for which access is necessary to perform their intended functions.