Data portability and deletion procedure

Dated 17 September 2026. Next review by 19 March 2027.

The current version is on our security page: https://barrierops.com/security#retention.

• The evidence ledger is hash-chained, and the chain verifies with your own tools. It does not depend on us being here for you to check it, which is the point of building it that way.
• Any member of an organisation can export all of it as one archive, from Data, exports and imports in the organisation’s settings, with no support ticket. The archive is JSON: every asset’s issues, occurrences, documents, scan history and evidence ledger with its hashes, plus vendor products, the audit trail and every finished report. Deleted assets are not in it.
• Deleting an asset marks it deleted and removes nothing: its pages, documents and issues are retained, and the deletion can be undone by us.
• Evidence is never deleted automatically, never by cascade, and never as a side effect of deleting an asset. Deleting it at all requires written instruction from an organisation owner.
• Account deletion as a documented process — a grace period, a final export, a written confirmation — is not built and not written down yet. Ask for the contract term instead; we will send you the clause before you sign.