Data Retention Policy
Draft for solicitor and privacy review before production use. Last updated 8 October 2026.
Schedule awaiting agreement
There is no universal retention period configured for all tenants. Production onboarding must agree periods by data class, legal holds, deletion authority and export rights. No automatic deletion guarantee is made.
Operational and financial evidence
Retain only for the agreed business and legal purpose. Deletion may be restricted by a documented legal hold or recordkeeping obligation. Archive flags hide records from active workflows but do not delete them.
Approval security
Email codes expire after 10 minutes and verified access sessions after 30 minutes. Approval links have a bounded expiry and can be revoked. Receipts and audit evidence remain stored independently of link availability. Expiry limits access; it is not automatic physical deletion of all security rows.
Requests and end of service
Workspace administrators can request deletion or assisted export through the private data controls. Agree an export window, file transfer method, deletion review and confirmation before exit. Backups and provider retention must be included in the final schedule.