Data retention and deletion

While you use COHESORA

Firm data is kept until the firm deletes it or leaves. Individual documents can be deleted by administrators unless they are the source evidence of an approved or posted entry.

Export

Administrators can download a ZIP of all firm data at any time (one JSON-lines file per table plus document files). Credentials, tokens and password hashes are never included. Export remains available after a trial ends.

Leaving (offboarding)

An administrator can start offboarding by confirming the firm name and password. Data stays recoverable for a retention period of 30 days (the offboarding can be cancelled), then all tenant records and stored document files are permanently deleted. A minimal record that the firm existed and was purged (including an audit entry) is kept.

Expired trials

When a trial ends, the workspace is suspended but data is not deleted, and administrators can still export it. No automatic deletion of suspended workspaces is implemented. A deletion schedule for long-suspended workspaces is a decision required below.

Operational data

• Sessions expire and are cleaned up automatically; email tokens expire and are cleaned up.
• Rate-limit counters are removed after two days; security events after 90 days.
• Server logs are kept on the operator's computer; no automatic rotation period is guaranteed yet.

Backups

There are no managed, scheduled backups of the database (free plan) or of document files. Operators can take encrypted logical database dumps manually. Because backups are not systematic, deleted data may persist in a manual dump until that dump is destroyed.