Skip to content
Skip to content

Each of your clients gets a notice before they upload, their consent is recorded, each request keeps to one purpose, every item is deleted on its own date, every step goes on a record that cannot be changed, and their rights requests are handled in the product.

This page follows one request from the moment you send it to the moment its documents are deleted. Each step links to the page that explains it in full. What the product does is described here, and what we claim and what we do not is on its own page.

  1. 1 Your client reads a notice. We compose it from your firm's name, the purpose, the items, the retention rule and your grievance contact. It is published as a version that is never changed afterwards.
  2. 2 Your client agrees. The upload page takes no document and no written answer until they do. Their consent is stored against the exact notice version, with the time and the link they used.
  3. 3 The request keeps to one purpose. The notice, the consent and the documents all belong to that request. A new purpose is a new request with its own notice and consent.
  4. 4 Every item gets a date. For a fixed period with no law, a row opens in your Retention queue fifteen days before the earliest date, so that you can renew, keep or delete. If nobody acts, each item is deleted in the first nightly run after its date.
  5. 5 Every step goes on the proof record. Each entry is chained to the one before by a SHA-256 fingerprint, and a daily anchor sits where it cannot be rewritten. The record stays after the data is gone.
  6. 6 Your client can ask for more. Their receipt carries a private link to withdraw, or to ask for a copy, a correction or deletion. A withdrawal acts at once and you answer the other three within 90 days.
  7. 7 The data is protected throughout. Documents are encrypted and everything is hosted on AWS in Mumbai.
For example

Amaltas Deshmukh & Co sends Anita Deshpande a request on 1 July 2027 with a retention period of 90 days. Anita reads the notice, agrees and sends her documents the same day. Her consent, the notice version and the fingerprint of each document are on the proof record. Each document has the date 29 September 2027. On 14 September 2027 a row for her opens in the Retention queue. Nobody acts, so her documents are deleted in the first daily run after 29 September 2027. The proof record still shows what she agreed to, what was received and when it was deleted.