Bot-docs: How the data is stored

[krajniak]

Since the attachments are stored somewhere in cloud in area in which nor user, nor but have governance of. It would be good to know, how where and for how long the data is stored. And also, if there is a possiblity to request deletion of the data. Especially in the era of GDPR rules.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: f3e4dd44-9bfc-14b1-cfd4-d37d500b1877
• Version Independent ID: 965c2c94-8cf1-fbf0-c321-547a90449382
• Content: Send an activity the bot - Bot Service
• Content Source: articles/rest-api/bot-framework-rest-direct-line-3-0-send-activity.md
• Service: bot-service
• GitHub Login: @RobStand
• Microsoft Alias: kamrani

[Kaiqb]

For bots that were built using SDK v3, take a look at the GDPR blog. In SDK v4, we don't store user data.

[krajniak]

I disagree. When you send an attachment, from front end, the url to the attachment is generated by directline channel or not framework. On the backend I do not received binaries. Only the url. Ergo attachments are stored somewhere since I can download them

[aschemel]

Hi! @krajniak did you get more info on this? I have the same doubt, where are the attachments stored?

@kaiqb any more comments on this?? Thanks!

[krajniak]

Nope

czw., 25 kwi 2019 o 11:13 aschemel [e-mail] napisał(a):

Hi! @krajniak https://github.com/krajniak did you get more info on
this? I have the same doubt, where are the attachments stored?

@Kaiqb https://github.com/Kaiqb any more comments on this?? Thanks!

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/bot-docs/issues/925#issuecomment-486586456,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ACLU7BLI6QSO2ODSR26IZTDPSFY35ANCNFSM4G4LSQRA
.

[JonathanFingold]

The Bot Framwork Activity spec describes how attachments are represented in an activity object, either embedded or as a link to uploaded content. For uploaded content, it's up to the channel how to manage this resource. It's a separate issue what the bot does with the content once it has received it. Does that answer your questions?

[krajniak]

Not really. I'm talking about DirectLine channel. When you upload the attachment in the webchat component, directline itself saves the attachment somewhere in the cloud. Bot backend only receive a link to uploaded file.
Since the functionality is used in GDPR ready countries we need to know where DirectLine stores these attachments and if we have any control over deleting them

[JonathanFingold]

Thanks for the clarification. I've flagged this for our support team.

[CoHealer]

Re-applying support label for aggregation inclusion

[dmvtech]

Hi @krajniak

Attachments for Direct Line are stored encrypted on Microsoft servers. The size limit currently is 20MB and the contents will be available for 24 hours.

I don't know about being able to request them to be deleted. Off the top of my head, I don't believe so. @dandriscoll @EricDahlvang any ideas on that part?

[CoHealer]

Resolving as answered. If dmvtech's answer does not suffice please reopen.