08Drawer 08, Trust & privacy
Card 8 of 10
How long data is kept, and leaving
The question: How long is data kept, and what happens to it if we leave?
While your clinic subscribes, its data stays. When the subscription ends, you have 60 days to ask for your clinic's data in common machine-readable formats; then it is deleted from live systems within 90 days, and backups are overwritten within a further 35 days, unless the law requires keeping it longer.
When a subscription ends
- 60 days to ask for an export, in common machine-readable formats.
- Then deleted from live systems within 90 days.
- Backups overwritten within a further 35 days.
- Written confirmation of destruction on request.
Other records
- Account and billing records: as tax and accounting law requires (generally 6 to 7 years).
- Security and audit logs: up to 24 months, longer for an investigation or a legal duty.
- Support correspondence: up to 24 months after it's resolved.
Your duties
Your records-retention duties as custodian stay yours; export before the window closes.
Where to look