Protect sensitive information with zero data retention in recipe job logs

Table of Contents

What are job logs?

By default, every time one of your recipes runs, Workato stores detailed logs for the job. The logs include full details of the data processed by each step of the recipe. You can use the information in job logs to audit and troubleshoot your automations. The default amount of time Workato retains job log data is defined by your data retention policy.


Also read:

How to troubleshoot recipe errors using network tracing

Use skip steps for faster testing and troubleshooting


By default, job logs store all types of data — including sensitive data

However, because job logs record all data processed by a recipe, they can also include sensitive data and personally identifying information (PII). This data is encrypted-at-rest and you can customize what data is included in your job logs, and who can view them.

However, for some automations, you might not want to retain any log data for any amount of time. For example:

  • Your organization may have data protection policies covering data stored in external platforms.
  • You may need to comply with regulatory requirements around handling PII.

To handle these situations, you can now opt not to store any data for a particular recipe.


Related: How to protect sensitive data with masking


How to manage sensitive data stored in recipe job logs

Enable zero data retention for a recipe

To show you how to enable zero data retention, let’s look at an example recipe. Here you can see the job logs for an employee onboarding recipe.

job log for employee onboarding recipe

Job log for employee onboarding recipe

We can drill down into any job and see a full record of the data. Note that the trigger for this recipe includes a lot of sensitive data about the employee, including:

  • contact details
  • ID numbers
  • date of birth
  • salary
sensitive data in job log

Sensitive data in job log

We want to completely prevent this sensitive data from being retained in the logs for any amount of time. To do this, just head to the Settings tab and set the Jobs data retention setting to Do not store.

set data retention to do not store

Set jobs data retention settings to “do not store”

With “do not store” enabled, the Jobs list will show only the time and status of the job.

Zero data logged

Zero data logged in the job log

Drill into the detailed logs to see…well, not much. 

With zero data retention enabled, how is data affected?

Note that with no job details logged, the option to repeat a past job or a failed job will not be available. Read the full documentation on how data is affected when “do not store” is enabled in your job data retention recipe setting. 

Learn more

 

Was this post useful?

Get the best of Workato straight to your inbox.

Table of Contents