-
Notifications
You must be signed in to change notification settings - Fork 0
Add data retention policy #14
Copy link
Copy link
Open
Labels
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority worklegalLegal documentation or review requiredLegal documentation or review requiredneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, export
Description
Metadata
Metadata
Assignees
Labels
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority worklegalLegal documentation or review requiredLegal documentation or review requiredneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, export
Priority: High
Area: Privacy / Data Governance
Description:
ChemVault needs retention rules for account data, email, files, AI inputs/outputs, logs, audit events, backups, push subscriptions, API keys, and contact forms.
Acceptance Criteria:
Retention matrix exists; deletion/anonymization jobs are planned or implemented; audit/security retention exceptions are documented; Privacy Policy aligns; legal counsel reviews.
Suggested Files to Change:
docs/legal/data-retention-policy.md; docs/compliance/data-map.md; docs/legal/privacy-policy.md; service scheduled jobs/migrations
Source: docs/compliance/compliance-issues.md