--- title: Data Directory category: Getting Started chapter: 1 order: 8 --- Dependency-Track uses `~/.dependency-track` on UNIX/Linux systems and `.dependency-track` in the current users home directory on Windows machines. This directory, referred to as the *data directory*, contains the NIST NVD mirror, embedded database files, application and audit logs, as well as keys used during normal operation, such as validating JWT tokens. It is essential that best practices are followed to secure the data directory. The data directory includes: | Content | Purpose | |----------------------------|-----------------------------------------| | db.mv.db | Embedded H2 database | | dependency-track.log | Application log | | dependency-track-audit.log | Application audit log | | first | Mirror of EPSS score data | | id.system | Randomly generated system identifier | | index | Internal search engine index | | keys | Keys used to generate/verify JWT tokens | | nist | Mirror of the NVD and CPE dictionary | | server.log | Embedded Jetty server log | | vulndb | Mirror of VulnDB |