Data retention & deletion
Lumiaxiom retains each class of data only as long as needed to deliver the service, honor contractual commitments, or satisfy legal requirements. Owners may trigger tenant-wide purge at any time; a 30-day export window is offered on offboarding. Last reviewed July 2026.
| Data class | Retention | Notes |
|---|---|---|
| Account & profile data | Life of account + 30 days | Deleted on offboarding after the 30-day export window. |
| Organization & member records | Life of tenant + 30 days | Owner-initiated tenant deletion purges within 30 days. |
| Evidence ledger entries | 7 years (default) or contractual | Immutable hash-chained records; retention is tenant-configurable up to 10 years. |
| Source code scanned in PRs | Zero retention | Parsed in-runtime and discarded. Only metadata, hashes, and findings persist. |
| AI copilot prompts & responses | 30 days (rolling) | Used only to render the tenant's chat history. Never used for model training. |
| Audit logs | 7 years | Access grants, admin actions, evidence appends. Exportable at any time. |
| Backups (database) | 30 days (point-in-time) | Cross-region replicated. Restores are logged. |
| Backups (object storage) | 30 days | Versioning enabled for evidence and org-policies buckets. |
| Application logs | 90 days | Structured logs with PII scrubbing at ingest. |
| Security event logs | 1 year | Auth events, RLS denials, admin actions. |
| Billing & invoice records | 10 years | Required by financial regulations in most jurisdictions. |
| Support tickets & email | 3 years after last activity | Deleted on request unless under legal hold. |
Tenant-controlled deletion
Organization owners can initiate a full tenant purge from the Cloud settings panel. Deletion runs asynchronously: acknowledgement within 24 hours, hard-delete complete within 30 days. Encrypted backups age out on their normal 30-day cycle. A signed deletion attestation is written to the audit log and can be exported.
Export on offboarding
Every plan includes CSV/JSON export of organizations, controls, evidence ledger, audit logs, and framework adoption. Corporate tenants may request a signed evidence bundle (hash-chained, verifiable offline) as part of offboarding.
Legal holds
Where required by law or an active legal process, specific records may be preserved beyond the schedule above. Affected customers are notified where legally permitted.