F5 NGINXaaS Privacy Statement

Created: 23 May 2022
Last updated: 1 January 2026
Last reviewed: 1 January 2026

Overview

F5 NGINXaaS (the “Service”) allows customers to bring their existing NGINX configurations to the cloud. This fully managed service is integrated with the customer cloud service provider. This Privacy Statement applies to the customer data that F5 processes through the Service.

Roles of the Parties

Under the data protection laws of the EU and similar jurisdictions, F5 is a processor of the data of the customer, and the customer is, or acts on behalf of, a controller of such data, to the extent it contains personal data.

Personal Data Processed by the Service

• User Identity Info: Azure or Google user identity info, including user email address and unique Google user ID.
  • Data is used to authenticate and authorize users
  • When a user is removed, associated user data is deleted.
• The Service logs and configurations: as configured by the customer, which may contain personal data, such as:
  • IP address, URL requests, query parameters, referring URL, user-agent identifier
  • Log data may be used for troubleshooting customer issues.
  • Log data is processed by the service and remains within the customer’s cloud service tenant
  • Configuration data persists in the Service and is retained until no longer needed.

The data is not shared with third parties other than the cloud service used by the customer.

More Information

To exercise your rights with respect to the customer data that F5 processes when providing the Service to a customer, please contact that customer. For more information about F5’s privacy practices, please see the F5 Privacy Notice.