Data Retention
Last updated: 2026-07-12
Conservative defaults
- Unsaved pasted notes: not stored; discarded after the analysis is generated.
- Failed processing input: not stored; if ever queued, deleted within 24 hours.
- Saved analyses: retained until you delete them or firm policy expires them (default 365 days).
- Deleted matters: held for a configurable recovery period (default 30 days), then permanently deleted.
- Temporary exports: generated on demand; not retained server-side.
- Audit logs: retained per firm policy (default 365 days).
Firm control
Firm administrators can adjust retention windows in Settings → Data. All configured windows are enforced by a scheduled cleanup job.
TODO SECURITY: The scheduled retention/cleanup job endpoint is implemented and protected by a shared secret, but must be wired to a real scheduler (e.g. cron) in the target environment.