Data retention
We retain customer data for the duration of an active subscription.
If a subscription expires or is disabled, we retain the associated customer data for 90 days. This retention period allows the account to be reactivated without loss of existing documents, envelopes, recipient information, audit records, or associated service data.
If the subscription is reactivated during this period, access to the existing data is restored.
If the subscription is not reactivated, the associated production data is deleted after the 90-day retention period, unless a longer retention period is required by law, contract, legal hold, or another applicable obligation.
Early deletion
Customers may request deletion of their data before the end of the standard 90-day retention period.
Where the request can be appropriately authenticated and there is no legal, regulatory, contractual, or preservation requirement preventing deletion, we will delete the customer's production data earlier.
Backups and recovery
We maintain backups to protect customer data against events such as accidental deletion, corruption, application failure, malicious deletion, and infrastructure failure.
Backups are maintained for operational and disaster recovery purposes only and are not used as a long-term archive of customer information.
Our recovery capabilities include short-term point-in-time recovery and backup copies retained for approximately 90 days, depending on the underlying data service.
Data remaining in backups after deletion
Deleting customer data from the production service does not necessarily remove that data immediately from existing backup recovery points.
After production data has been deleted:
- no new backups will contain the deleted production data;
- existing backup copies may continue to contain historical data until the applicable recovery point expires;
- backup copies are not retained beyond their normal retention period solely for archival purposes; and
- deleted customer data contained within backups is not used for normal business operations.
Under our standard backup configuration, residual historical copies normally expire within approximately 90 days of the last backup containing the data.
Data residency
Customer data and associated backup data remain within the Azure region assigned to that customer or workload.
We do not use cross-region replication for customer data where doing so would conflict with the applicable data-residency requirement.
Recovery and previously deleted data
In some disaster-recovery scenarios, restoring an older backup could temporarily restore information that had previously been deleted.
Our recovery procedures are designed to identify and reapply completed deletion actions so that previously deleted customer data is not unintentionally returned to normal service.
Legal and regulatory exceptions
In some circumstances, we may be required to retain specific information for longer than the standard retention period, for example where required by law, contractual obligation, legal hold, dispute preservation, or another applicable regulatory requirement.
Any such retention is limited to the information and period required for that purpose.
Summary
Customer data is retained while a subscription remains active. If a subscription expires or is disabled, production data is retained for 90 days to allow account reactivation, unless the customer requests earlier deletion. After the applicable retention period, production data is deleted. Backups are retained only for operational and disaster recovery and normally expire within approximately 90 days. Where regional data-residency requirements apply, customer data and associated backups remain within the assigned Azure region.
0 Comments