Vendor Sheet
Fortinet Data Privacy Practices
This data sheet explains how Fortinet products and services collect, process, transmit, store, protect, and retain information that may contain personal data. It covers user details, device identifiers, activity logs, URLs, threat information, support records, configurations, telemetry, and cloud service data. The document outlines communication with FortiGuard, FortiCare, and FortiCloud for licensing, updates, support, analytics, and threat intelligence, including protocols, encryption, frequency, and whether collection can be disabled. It also describes security controls aligned with standards and regulations such as NIST, ISO/IEC 27000, GDPR, CCPA, SOC, and SOX. Product-specific sections identify data types, hosting regions, retention periods, and deletion practices across numerous Fort
