Retention schedule
Baseline retention categories for production operations.
This notice is a software product baseline and should be reviewed by qualified legal counsel before production launch.
Account and billing records
Retain during the customer relationship and for the statutory period required for tax, accounting, fraud-prevention, and legal-claim purposes.
Workspace reporting data
Retain according to customer contract settings and legal hold. Report snapshots and evidence metadata may need longer retention for defensible reporting.
Security and audit logs
Retain audit, access, rate-limit, and security logs long enough to investigate abuse, evidence integrity, incidents, and legal claims.
Expired operational data
Expired invitations, questionnaire tokens, stale imports, temporary uploads, and unneeded consent metadata should be deleted or anonymized by scheduled jobs.