Data Management

Information about data retention, deletion, and your rights

Data Retention

CEvident™ retains your data according to configurable retention policies. Retention periods may vary by data type and can be configured per organization.

Retention policies determine how long data is kept before automatic deletion. Legal holds override retention policies and prevent data deletion even if retention periods have expired.

To view or manage retention policies, visit the Admin Panel (requires appropriate permissions).

Legal Holds

Legal holds prevent data deletion even if retention periods have expired. This ensures compliance with legal obligations, investigations, or litigation requirements.

When a legal hold is active, affected data cannot be deleted until the legal hold is released. Legal holds are logged in the audit trail for full traceability.

Data Subject Access Requests (DSAR)

You have the right to access, export, or delete your personal data. CEvident provides DSAR functionality through the admin panel.

Export Requests

Export requests generate a structured JSON file containing all personal data associated with a person, including licenses, permits, CE activities, evidence files, and compliance runs.

Delete Requests

Delete requests permanently remove personal data from the system. Delete requests are blocked if a legal hold is active on the data.

To submit a DSAR request, visit the DSAR Management page in the admin panel.

Audit Logging

All actions within CEvident are logged in an append-only audit trail. This includes:

  • Data creation, updates, and deletions
  • Compliance calculations and audit pack generations
  • Assistant interactions
  • Administrative actions (user management, rule changes, etc.)
  • DSAR requests and legal hold operations

Audit logs are retained according to retention policies and are included in audit pack exports for legal traceability.

Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit, access controls, and regular security assessments.

Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data (subject to legal holds)
  • Portability: Export your data in a structured format
  • Objection: Object to processing of your data
  • Restriction: Request restriction of processing

To exercise these rights, use the DSAR features in the admin panel or contact support.

More Information

For more information about how we handle your data, see our Privacy Policy.

Trademarks

CEvident is a trademark. All other marks are the property of their respective owners.