Owner: Ayisha (Compliance) · Department: Compliance · Status: Live · Version: 1.0
Effective Date: 2026-06-13 · Last Reviewed: 2026-06-13 · Next Review Date: 2026-09-13
Source of Truth: this page · Maturity: 3 (Usable)
Retention schedule by data class. This page separates TARGET policy from CURRENT enforcement (Gate 6) so it is audit-honest.
| Data class | Target retention | Current enforcement (code-verified) |
|---|---|---|
| COA documents | 3 years | Enforced — do_not_purge + object-lock retain_until = +1095d |
| Compliance audit log | Permanent (append-only) | Enforced — DB append-only trigger; never purged |
| Generic audit_events | per AUDIT_LOG_RETENTION_DAYS |
Deleted by retention task past the window — narrower than 3yr; confirm policy |
Raw PII (pii_raw) |
90-day TTL | Enforced — nightly purge |
| Identity verification | provider ref + selfie retained | retained; no TTL |
| Financial records | 7 years (IRS/1099) | Not separately enforced — gap |
Gaps to close (TARGET): 7-year financial retention is not enforced;
audit_eventsdeletion may conflict with a 3-year compliance-retention claim. Owner to reconcile. (Source: backend-truth audit §24.)
Reference index · SOPs · Playbooks · Home