Skip to content

Wazuh Security Agent Privacy Notice

Data We Collect

Our Wazuh security agent monitors your systems and collects:

  • System logs and security events
  • File changes and integrity monitoring data
  • Network connection metadata
  • Installed software and system configuration
  • Security vulnerability information

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, we process your data based on:

  • Contract execution: Processing is necessary to provide the agreed security services in our service contract
  • Legitimate interests: Security monitoring is essential to protect your systems from cyber threats
  • Legal obligations: Certain data collection may be required to meet regulatory compliance requirements

How We Use This Data

  • Security monitoring: Detect threats and security incidents
  • Compliance: Generate audit reports and compliance documentation
  • System health: Monitor system performance and availability
  • Incident response: Enable rapid response to security events

Data Storage and Processing

  • Location: All data is processed and stored exclusively in Canada
  • No international transfers: Your data never leaves Canadian territory
  • Data centers: We exclusively use data centers located in Canada

Third-Party Sharing

We never share your data with third parties. All collected data remains under our exclusive control and is never transmitted, sold, or shared with external organizations, subcontractors, or partners.

Data Protection

  • All data is encrypted during transmission and storage
  • Access is restricted to authorized security personnel only
  • No personal files or content are accessed, only system metadata
  • Strict access controls and mandatory multi-factor authentication

Data Retention

  • Retention period: 90 days from collection
  • Automatic deletion: All data is completely deleted from our systems after 90 days
  • Secure erasure: Deletion is irreversible and complies with industry security standards

Your Rights

Under PIPEDA and applicable provincial laws, you have the right to:

  • Request access to your monitoring data
  • Request correction of inaccurate data
  • Request deletion of data before the end of the retention period
  • Refuse non-essential monitoring features
  • Receive incident notifications affecting your data
  • File a complaint with the Privacy Commissioner of Canada

Incident Notification

In case of a security incident affecting your data, we will notify you within 72 hours of discovering the incident, in accordance with Canadian legal requirements.

Contact

For privacy questions: info@clavea.ca
Address: 101-3333 Bd du Souvenir, Laval, QC H7V 1X1
For more info: clavea.ca

Last updated: July 2025