# Cisco privacy data sheets as the destination for retention questions

Canonical: https://warmtransfer.net/knowledge/cisco-privacy-data-sheets

Last verified: 2026-09-16

The Webex Calling Privacy Data Sheet gives specific retention periods by data category, including 23 months for call detail records and call logs, or 13 months in the European Economic Area and Switzerland[^2]. Cisco privacy data sheets also name sub-processors and state how a customer requests deletion of personal data[^9][^5].

## Retention periods in the Webex Calling sheet

The Webex Calling Privacy Data Sheet states that call detail records and call logs are deleted after 23 months, except in the European Economic Area countries and Switzerland, where they are deleted after 13 months[^2]. The sheet gives 4 further retention periods and a registration retention rule[^6].

| Data category | Retention stated | Region exception |
|---|---|---|
| Call detail records and call logs[^2] | 23 months | 13 months in the European Economic Area and Switzerland |
| Log files containing communications traffic data[^6] | 30 days | 7 days in the European Economic Area and Switzerland |
| Portal access details[^6] | 90 days | |
| Call recordings[^6] | 360 days | |
| Text messages[^6] | 400 days | |
| Registration information[^6] | 13 months from service termination or user deactivation | |

## Deletion requests

The Webex Calling Privacy Data Sheet states that a customer requests deletion of personal data through their partner or by opening a technical assistance centre request[^5]. According to the sheet, Cisco endeavours to delete the requested data from its systems within 30 days unless the data must be retained under applicable law or for Cisco's legitimate business purposes[^5].

## Controller and processor roles

The Webex Calling Privacy Data Sheet states that, in jurisdictions that distinguish the 2 roles, Cisco is the data controller for personal data processed to administer and manage the customer relationship[^3]. The same sheet states that Cisco is the data processor for personal data that the service processes to provide its functionality[^3].

## Sub-processors named in the sheets

The Webex Calling Privacy Data Sheet names Amazon Web Services as a sub-processor that receives Host and Usage Information and User-Generated Content as a data centre and hosting provider[^9]. The sheet lists data centre locations in the United States, Germany, the Netherlands, the United Kingdom, Brazil, Australia, Japan and Singapore[^9].

The Cisco Webex Contact Center Enterprise Privacy Data Sheet names Google as an optional sub-processor that receives Customer Content[^4]. That sheet describes the service type as Google Contact Center AI, which provides transcription in the region where the customer is provisioned[^4]. It also states that a Google Contact Center AI customer who creates a project in the Google Cloud Platform portal may select where certain customer data will be stored[^4].

## Completeness of the published lists

Field reports suggest that the Webex Calling sheet's sub-processor table is not presented as the complete list, because the sheet states that a current list of third-party service providers with access to personal data can be provided upon request[^7]. In the field, the sheets differ on this point: the Webex Contact Center Enterprise sheet states that its table lists the current sub-processors for the service, that the list may change from time to time and that the sheet is updated accordingly[^8].

## Why the data sheet is the destination

Field reports suggest that the named third parties behind these 2 Webex products appear in their privacy data sheets rather than in the product documentation[^1]. In the field, neither Amazon Web Services nor Google is named in any help.webex.com article the corpus holds for Webex Calling or Webex Contact Center Enterprise[^1].

## See also

- [Webex Contact Center recording and contact data retention](https://warmtransfer.net/knowledge/webex-cc-recording-retention)
- [Named open model checkpoints and third party vendors behind Cisco AI features](https://warmtransfer.net/knowledge/cisco-ai-model-supply-chain)
- [CDR privacy redaction and evidence-safe reporting](https://warmtransfer.net/knowledge/cdr-privacy-redaction)
- [The Cisco Trust Portal as a monitorable document source](https://warmtransfer.net/knowledge/cisco-trust-portal-documents)
- [Webex suite data residency and the GEO model](https://warmtransfer.net/knowledge/webex-suite-data-residency)

## Applicability

The Webex Calling retention periods for call detail records, call logs and communications traffic log files carry shorter periods for the European Economic Area and Switzerland[^2][^6]. The Webex Calling sheet lists Amazon Web Services data centre locations in the United States, Germany, the Netherlands, the United Kingdom, Brazil, Australia, Japan and Singapore[^9]. Applies to: Cisco Webex Calling, Cisco Webex Contact Center Enterprise, and Cisco Webex. Sources checked 2026-09-16.

## What remains uncertain

Field reports suggest that the Webex Calling sheet offers a current list of third-party service providers on request[^7]. The contents of that list are not covered by the sources below. The privacy data sheets for Webex Meetings, Webex App and Webex Contact Center multi-tenant are not covered by the sources below. The Webex Calling sheet allows retention past a deletion request for Cisco's legitimate business purposes[^5]. What Cisco counts as a legitimate business purpose is not covered by the sources below. The Webex Calling Privacy Data Sheet states that call recordings are deleted after 360 days[^6]. Whether any other source gives a different retention period for Webex Calling call recordings is not covered by the sources below. How often a privacy data sheet is revised, and whether old versions can be retrieved, is not covered by the sources below.

## Sources

[^1]: The named third parties behind the 2 Webex collaboration products whose privacy data sheets the corpus holds appear in those sheets rather than in the product documentation: the Webex Calling sheet names Amazon Web Services as its hosting sub-processor and the Webex Contact Center Enterprise sheet names Google as an optional transcription sub-processor, and neither company is named in any help.webex.com article the corpus holds for those 2 products (field report). Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Section 10 of the Webex Calling sheet and the Sub-processors section of the Contact Center Enterprise sheet, checked against every help.webex.com source the corpus holds for both products. Checked 2026-09-16.
[^2]: The Webex Calling Privacy Data Sheet states that call detail records and call logs are deleted after 23 months except in the European Economic Area countries and Switzerland where they are deleted after 13 months. Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Data Deletion and Retention table, Host and Usage Information row. Checked 2026-09-16.
[^3]: The Webex Calling Privacy Data Sheet states that in jurisdictions distinguishing the 2 roles Cisco is the data controller for the personal data processed to administer and manage the customer relationship and the data processor for the personal data processed by the service in order to provide its functionality. Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), introductory paragraphs. Checked 2026-09-16.
[^4]: The Cisco Webex Contact Center Enterprise Privacy Data Sheet names Google as an optional sub-processor receiving Customer Content, describes the service type as Google Contact Center AI providing transcription in the region where the customer is provisioned, and states that a Google Contact Center AI customer creating a project in the Google Cloud Platform portal may select where certain customer data will be stored. Source: [Cisco Webex Contact Center Enterprise Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-contact-center-enterprise-privacy-data-sheet.pdf), Sub-processors table. Checked 2026-09-16.
[^5]: The Webex Calling Privacy Data Sheet states that a customer requests deletion of personal data through their partner or by opening a technical assistance centre request, and that Cisco endeavours to delete the requested data from its systems within 30 days unless the data must be retained under applicable law or for Cisco's legitimate business purposes. Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Data Deletion and Retention, opening paragraph. Checked 2026-09-16.
[^6]: Beside the call detail record period the Webex Calling Privacy Data Sheet gives 4 further retention periods: log files containing communications traffic data are deleted after 30 days except in the European Economic Area and Switzerland where they are deleted after 7 days, portal access details after 90 days, call recordings after 360 days, and text messages after 400 days, while registration information is kept for 13 months from service termination or user deactivation. Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Data Deletion and Retention table, read as cells. Checked 2026-09-16.
[^7]: The Webex Calling Privacy Data Sheet states that a current list of third-party service providers with access to personal data can be provided upon request, so the sub-processor table it publishes is not represented as the complete list (field report). Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Section 10 Sub-processors, closing sentence of the paragraph. Checked 2026-09-16.
[^8]: The Webex Calling Privacy Data Sheet says a current list of third-party service providers can be provided upon request while the Webex Contact Center Enterprise Privacy Data Sheet states that its table lists the current sub-processors for the service and that the list may change from time to time with the sheet updated accordingly (field report). Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Section 10 of the Webex Calling sheet against the Sub-processors section of the Contact Center Enterprise sheet. Checked 2026-09-16.
[^9]: The Webex Calling Privacy Data Sheet names Amazon Web Services as a sub-processor receiving Host and Usage Information and User-Generated Content as a data centre and hosting provider, with data centre locations in the United States Germany the Netherlands the United Kingdom Brazil Australia Japan and Singapore. Source: [Webex Calling Privacy Data Sheet](https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/collaboration/cisco-webex-calling-privacy-data-sheet.pdf), Section 10 Sub-processors table. Checked 2026-09-16.