Secondary Use of Customer Data Policy

How OPSWAT uses the files and results you submit

OPSWAT uses the files you submit to MetaDefender Cloud to scan them and return results to you. This page lists every other way your submissions and their results are used, and the choices you have.


1. Results of your scans. If you scan a file without private processing, its results are visible to other users of MetaDefender Cloud and are kept for up to 10 years. To keep results within your organisation, use private processing.

2. Threat intelligence. OPSWAT uses to build threat intelligence that it provides to other customers. This intelligence contains and does not contain personal data.

3. Sample sharing. Sample sharing is enabled by default. If it is enabled, OPSWAT may share your file with the malware research community or its internal malware research team to investigate it further, in particular when the file is considered a false positive or potential outbreak malware. If you are a paying customer, you can disable sample sharing for a scan; the file is then deleted immediately once the analysis is done. If you use private processing, your file is never shared, whatever the sample sharing setting says.

4. Training detection models. OPSWAT use the files you submit to train detection or AI models.

5. Service statistics. OPSWAT produces aggregated statistics about how the service is used. They do not identify you or your users and do not contain personal data.

6. Your choices. You control how your submissions are used through two options: private processing, which deletes your file after analysis, keeps the results within your organisation and means your file is never shared; and sample sharing, which is enabled by default and which paying customers can disable for a scan.