Skip to content
Skip to content

Deleted means the key that protects the file is destroyed so every copy becomes unreadable, the file is removed, and a record stays that it existed and was deleted.

Every document we store is encrypted under a key of its own. To delete a document, we destroy that key. Every copy of the file then becomes permanently unreadable, including any copy inside our backups. We then remove the file itself. Nobody at Confidential Dispatch can restore it.

A written answer is cleared. The original file name is removed. Your client's folder then shows Deleted per retention/erasure in place of the item.

Deletion works the same way whichever route triggers it:

  • The deletion date arrives and the daily run deletes the item.
  • You choose Delete now on a row in the Retention queue.
  • Your client withdraws consent and no law period applies.
  • You choose Erase this person in the folder. This also removes their name and contact details.
  • An account is deleted after it is suspended. The account's own key is destroyed, so everything it held becomes unreadable.

Each route is recorded in your audit trail. What stays after a deletion is that record and the consent record.

Documents you hold yourself are not stored with us. Deleting those is your own act, and we record your confirmation when you choose Confirm deleted. See recording consent for documents you hold.