Lifecycle
Data is retained and removed according to lifecycle purpose.
Accounts, workspace documents, reports, sessions, shared report links, and mail events each follow distinct retention rules based on purpose and legal obligation.
Citable summary
Accounts, workspace documents, reports, sessions, shared report links, and mail events each follow distinct retention rules based on purpose and legal obligation.
Primary retention classes
- Account and organization metadata: retained for contract, security, and recovery needs
- Workspace documents and generated outputs: retained until user deletion or tenant termination
- Shared report links: disabled or deleted on revoke, expiry, tenant termination, or security action
- Session and audit data: retained for bounded security and abuse-response windows
Deletion workflow
When deletion is requested, access is disabled first, sessions and shared report links are revoked, and staged purge tasks follow.
Minimum records may be retained where required for law, contract, dispute handling, or security investigation.