Security, Data Retention, and Deletion

This page documents how long data is kept, what’s recoverable, and how destructive actions behave.

Trash retention

The UI currently states:

• Deleted items are retained in Trash for 3 days before permanent deletion.

Inventory audit retention

Define the retention policy for:

• inventory sessions
• session item scan events
• asset history/audit trail
• assignment history

Workspace deletion

Workspace deletion is irreversible from the UI perspective.

Document:

• whether deletion is immediate or queued
• what is deleted (all assets, people, sessions, settings)
• whether exports/backups are possible before deletion

API key safety

Recommended practices:

• Store API keys in a secret manager
• Rotate keys on personnel changes
• Revoke unused keys