We manage the data on behalf of our customers. We have the following policy in place for this:

• Only named BlueConic employees are allowed to use Cassandra databases from customers for testing purposes
• A copy of a tenant can only retrieved by a specified group of named members of BlueConic R&D
• Copies of databases are on a separate file system, only accessible for by a specified group of named members of BlueConic R&D
• We will never mix two Cassandra databases from two different tenants
• If a tenant is removed on request of a customer, we will remove all data within one month, and, if needed sent the customer a copy of all this