Data Retention Policy

Effective date: 2025-10-10

We retain data to operate our services and meet legal obligations. Unless otherwise agreed in writing, our default retention for scan artifacts and findings is 24 months after the last scan or account activity. You may request earlier deletion subject to legal holds and backup cycles.

Customer controls

• Request deletion of artifacts that are no longer needed for services.
• Configure shorter retention through your contract or support.

Backups

Backups are rotated on a schedule; deletions may reflect after the next backup cycle completes.