Data Security and Storage

A Bosch ID is required to use the Device Portal. This can be created via the Bosch ID Management System (CIAM). To do this, the Privacy Policy and the General Terms and Conditions of the system must be confirmed.

All user data (email address, user rights and tenant information) is stored in the Identity Management Service of the Device Portal.

A Universally Unique Identifier (UUID) is assigned to each user and tenant.

Email addresses are only processed to activate the user account.

As long as a user is logged on, the user’s UUID and rights as well as the UUID of the tenant are stored in secure authentication cookies of the browser.

Deleting a user account also deletes the data in the Identity Management Service. Backups that have been created will also be deleted after a maximum of 90 days.

If possible, only secure https connections are used.

Whether a secure connection to a device can be established depends on the device.

The log files from the backend of the Device Portal are stored for 90 days. Special security log files contain the IP address of the users with a time stamp and event data for IT security.

Database backups are deleted after 8 days.

The Device Portal uses technical cookies without personal data.

The IT security during operation of a device cannot be guaranteed by the Device Portal. The user of the Device Portal must ensure that the device can be operated in a safe condition. For example, updates to the devices should not be performed during operation.

Software/plug-ins transmitted through the Device Portal, in particular user-specific or open source software/plug-ins, can cause the device to crash. Therefore, the functionality of the software/plug-in in the Device Portal must be ensured by prior testing.

Software transmitted via the Device Portal may be subject to export control regulations. The user of the Device Portal must check whether export control regulations are applied.