Data residency and retention for organisations in India
Where TotalHeal keeps organisation data, how long security events are retained, and the on-premises option.
Residency
The TotalHeal business SaaS runs in an India region. Organisation, device and security data is stored there and processed under India’s Digital Personal Data Protection Act, 2023. TotalHeal ZeroGate ZTNA uses a relay in India, and its access nodes never contact third-party infrastructure.
Retention
Security events are kept for at least 180 days by default, in line with CERT-In’s directions. For organisations in India and under the Government profile this is a floor: lowering it needs an audited administrator override with a reason, and the Government profile cannot lower it.
The Government profile
The Government profile sets the data-residency flag to India, keeps data for at least 180 days and switches on the CERT-In and DPDP reporting clocks.
On-premises and air-gapped
Organisations that must keep data inside their own network can run the TotalHeal control plane on their own Linux server. It is available on request. On-premises and hybrid · Government and air-gapped.
Availability, honestly
Our SaaS runs in one India region today. The Trust centre states the current availability set-up and lists any audit or certification only when it is actually under way.