PingOne

Protect Settings

Use the Protect Settings page to set maximum data retention periods for the risk data used by specific predictors that rely on historical context. Retention periods are centrally configured on this page per environment and applied to the supported predictors.

Centralized data retention provides:

  • Improved model learning, anomaly detection, and risk evaluation.

  • Operational consistency.

  • Alignment with privacy and compliance requirements, including the California Consumer Privacy Act (CCPA) and the EU General Data Protection Regulation (GDPR).

Data older than the configured threshold is securely and automatically deleted by scheduled cleanup processes. You can review retention period changes and deletion activity in the PingOne audit logs.

To change the data retention periods, in the PingOne admin console, go to Threat Protection > Protect Settings.

Predictor retention periods

You can define different data retention periods in days for each of the following risk predictors:

  • New Device

  • User-Based Risk Behavior

  • User Location Anomaly

When you modify the maximum data retention period, the new period applies only to new data collected after you changed the setting.