> ## Documentation Index
> Fetch the complete documentation index at: https://docs.summand.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data retention

> How long Summand keeps your data, and how to delete it.

Summand retains data for as long as your account is active, with two exceptions: Free-tier datasets that go inactive, and audit logs (which are retained on a fixed schedule for compliance).

## Active data

| Resource                                | Retention                                                     |
| --------------------------------------- | ------------------------------------------------------------- |
| Datasets (Pro / Enterprise / Education) | Indefinite while subscription is active                       |
| Datasets (Free)                         | Indefinite while the account is active and within tier limits |
| Semantic-layer versions                 | All versions kept while the dataset is active                 |
| Connectors                              | Indefinite while the account is active                        |
| Conversation history with Summand       | 7 / 90 / 365 days (Free / Pro and Education / Enterprise)     |
| Comments                                | Indefinite                                                    |
| Saved report templates                  | Indefinite                                                    |
| Generated PDF exports                   | Indefinite                                                    |

## Identity and audit data

Identity and audit data have separate retention and aren't subject to subscription state:

| Resource                               | Retention                                                    |
| -------------------------------------- | ------------------------------------------------------------ |
| Identity audit logs (WorkOS)           | 6 years                                                      |
| Application audit logs (CloudWatch)    | 1 year (Free / Pro), 6 years (Enterprise)                    |
| Sign-in sessions                       | Managed by WorkOS AuthKit; configurable per-org (Enterprise) |
| Sign-in attempts (success and failure) | 90 days                                                      |
| MFA factors                            | Until rotated by the user or admin                           |

Six-year retention satisfies HIPAA's audit requirement.

## On account deletion

When you delete your account from **Settings → Profile**:

* **Within 7 days** — the deletion is reversible. Email support to restore.
* **After 7 days** — all of your owned datasets, connectors, and personal data are deleted. Audit log entries you generated are preserved but anonymized (you're identified by user ID, not email or name, in older entries).
* **Datasets owned by you in Enterprise organizations** — transferred to the org owner unless you've explicitly transferred them first.
* **Datasets shared with you** — your grants are revoked; the datasets remain owned by their owner.

## On organization deletion (Enterprise)

When an organization is deleted:

* All datasets, connectors, and members are scheduled for deletion within 30 days.
* Identity audit logs are retained for the full 6 years (regulatory requirement).
* Active sessions are invalidated immediately.
* Members are notified by email; their personal accounts and data unrelated to the org persist.

Org deletion requires an account manager — there's no self-serve "delete organization" button.

## Data export before deletion

Before any deletion event, you can export:

* **Per-dataset** — PDF reports of every analysis tab from the dataset menu.
* **Per-organization** — full data export via [support@summand.com](mailto:support@summand.com); delivered as a tarball within 5 business days.
* **Identity audit logs** — exported via the WorkOS Admin Portal in CSV or JSON.

Export availability is independent of subscription state — you can always export your data, even if billing has lapsed.

## Backups

All Summand infrastructure is backed up continuously to AWS-managed snapshots:

* **DynamoDB** — point-in-time recovery enabled, 35-day window.
* **S3** — versioning + cross-region replication.
* **Secrets** — managed by AWS Secrets Manager with automatic rotation where supported.

Backup data is retained for the same period as the source data.

## Data locality

All data lives in AWS `us-east-1` (Northern Virginia). For customers with residency requirements outside the US, contact sales — see [Compliance](/enterprise/compliance#data-residency).

## Right-to-be-forgotten requests (GDPR)

For individual users covered by GDPR or CCPA: file a deletion request at [privacy@summand.com](mailto:privacy@summand.com). We confirm receipt within 5 business days and complete the deletion within 30 days. The confirmation includes a record of what was deleted and what (if anything) was retained for legal reasons.