Data Retention
Effective 26 October 2026
This page explains how long Truvasse keeps information, and how retention and deletion are governed by customer configuration, written agreements, security needs and legal obligations.
Principles
Truvasse seeks to retain information only as long as reasonably necessary for the service, customer instructions, security, auditability, legal obligations, dispute preservation, and defensible records.
Customer Evidence
Retention for customer evidence is established by the customer's configuration or written agreement rather than a fixed public schedule.
Account and Security Records
Account, authentication, audit, and security records may be retained for legitimate security, fraud-prevention, contractual, and legal purposes after an account or item is closed.
Deletion
Deletion requests are subject to customer instructions, legal holds, required audit preservation, active disputes, security needs, and technical backup cycles. Where deletion is available, Truvasse should document the request and completion process.
Identity/Biometric Data
If production biometric identity features are enabled, a feature-specific retention/deletion schedule and required consent/notice must be approved before collection. Raw biometric material should not be included in the defensible record unless expressly required and lawfully configured.