How developer data is handled.

The developer platform stores account identity, project metadata, request telemetry, and policy events required to operate API security decisions and dashboard reporting.

Sensitive credentials should be rotated regularly and scoped to the smallest practical surface. Logs and analytics should be retained only as long as required for security operations, billing, and incident response.

If you are evaluating the platform for regulated workloads, validate your own retention, residency, and audit requirements before turning on production enforcement.