The web protection Log Database stores Internet request data collected by Log Server, such as the source, destination, time, category, risk class, action (also called disposition), bytes sent and received, and so on for use by web protection reporting tools.

The Email Log Database stores records of email traffic and the associated analysis and disposition of that traffic. TRITON AP-EMAIL reporting uses this information to generate dashboard status charts and email activity reports showing, for example, the size and volume of messages processed, message analysis results, and email source and destination.

Data Incident and Configuration Database stores information about email, web, and other traffic that resulted in data loss prevention (DLP) policy breaches, such as the source, destination, time, status, and severity of each breach. It also stores TRITON AP-DATA policy configuration and system settings.