Previous Title: No changes recorded

Updated Title: No changes recorded

Previous Analysis: No changes recorded

Updated Analysis: No changes recorded

Previous Status: PENDING

Updated Status: APPROVED

Previous Title: Logs are deleted after a finite period of time

Updated Title: Logs are kept for up to 90 days

Previous Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` Log files of the portal are kept for up to 90 days. ```

Updated Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` + Log files of the portal are kept for up to 90 days. + IP addresses of failed and successful login attempts are kept for up to 90 days. + Browser platforms, names and versions, which were used during login attempts, are kept for up to 90 days. + Other backups of the portal are kept for up to 90 days. ```

Previous Status: No changes recorded

Updated Status: No changes recorded

Previous Title:

Updated Title: Logs are deleted after a finite period of time

Previous Analysis:

Updated Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` Log files of the portal are kept for up to 90 days. ```

Previous Status:

Updated Status: PENDING