Data Retention — Keystone Dataworks BizHub
Business records
| Data type | Retention | Deletion |
|---|---|---|
| Invoices, contracts, time entries | Per your tax/legal policy (often 7+ years) | Soft-delete or export first; hard delete after hold period |
| Expenses and receipts | Same as invoices | Remove DB row + file under uploads/tenant_*/ |
| MSAs / executed agreements | Life of contract + statutory period | Auth-gated storage only |
Security and audit
| Data type | Retention |
|---|---|
audit_log |
Minimum 1 year; extend for compliance |
| Web server logs | 90 days default (nginx rotation) |
| MFA backup codes (hashed) | Until consumed or MFA reset |
Demo tenant
- Synthetic data only; may be reset during upgrades without notice.
- No production data in
demotenant.
Backups
- Encrypted Postgres dumps and
uploads/snapshots on a schedule you define. - Test restore quarterly (see go-live checklist).
Template — align retention with your accountant and counsel.