Retention and deletion

While the service is active

While your service is active, your data is kept in your environment and backed up periodically. Backups are kept for a defined retention window, after which they are automatically deleted on a rolling basis. See Backups.

Right to erasure

As data processor, we assist you in handling the erasure requests you receive as controller. The application allows specific personal data to be deleted or anonymized; we provide the technical capabilities to do so and, where applicable, to propagate that deletion.

Minimum period on backups

Database backups are immutable for their first 7 days, as a security measure against the malicious destruction of backups (see Backups).

During that period, an erasure takes effect in the environment immediately, but cannot be applied to backups that already exist. This is not a limitation of our procedures: it is a property of the storage that nobody — including us — can circumvent. Once the period has passed, the erasure propagates with the normal backup rotation.

When the service ends

When the contractual relationship ends:

We provide you with an export of your data in a usable format, within the agreed timeframe.
After that period, we proceed to delete your data and its backups from the platform.

The platform's standard values for backup retention are published in Backups. The specific timeframes for backup retention, export, and final deletion at contract end are set out in your contractual documentation (DPA / service contract) and provided on request.

Secure deletion

Deletion is carried out so that data is no longer recoverable from the platform, including backups once their retention window and the immutability period described above have passed.