Licensed to be used in conjunction with basebox, only.
// security
Deletion
Applies to
Product: Demo · Cloud · Server · Audience: Security / Compliance reviewer
How users and administrators delete data, what is deleted immediately and what on schedule, how backups come into play, and how the deletion of a whole organization or a server is handled. The Infrastructure policy lists the deletability of locally stored content (history, RAG files) as implemented.
Who can delete what
| Data | Who | How | Effect |
|---|---|---|---|
| Single chat | User | Trash icon in the chat, confirmation (Chat history & data) | Immediately from the browser; all chats by clearing the browser data. Not recoverable, as not stored on the server |
| Own connector credentials | User | The connector's user settings | Immediately; the next tool call fails |
| Document from a knowledge base | Administrator | The app's knowledge base (Knowledge bases) | Document, passages and embeddings are removed |
| App including knowledge base | Administrator | App management | App, configuration, knowledge base |
| User account | Administrator | User management (Users) | Account and access immediately; which user data (chats, credentials) is deleted along with it, see below |
| API key | Administrator / developer | Revocation (API keys) | Immediately invalid |
| Audit entries | Nobody manually | Only via the configured retention period (Retention) | On schedule – audit entries are not meant to be individually deletable |
| Whole organization | basebox (Cloud) · Platform Operator (Server) | Contractually or administratively, see below | All data of the organization |
Immediate or scheduled
- Immediate: everything users and administrators delete in the application is gone for the application immediately – there is no recycle bin with retention.
- Scheduled: invitations after 14 days; temporary RAG files after processing. Audit entries are meant to drop off after the retention period in future – the slider currently has no effect.
- Delayed by backups: deleted data remains in backups until their rotation (e.g. 30 days). A deletion commitment must include this period; cleaning individual backups is not foreseen in practice.
Deleting an organization
basebox Cloud. At contract end basebox deletes your environment – organization, realm, databases, media – and subsequently the backups after their rotation. Before that you can export what you must keep: the audit log as CSV (Exports); knowledge base documents you hold anyway. Deadlines, confirmation of deletion and return formats are regulated by the DPA.
basebox Server. You delete yourself: remove the Helm release, delete PVCs and CloudNativePG clusters, destroy backups, securely wipe or physically destroy disks – following your media sanitization concept. Under operation by basebox, deletion is part of the end of the engagement, with a record (Customer-managed operation → Handover describes the reverse direction). When hosted at basebox, the hardware remains yours; you agree the return or destruction of the disks with basebox.
Demo. Test data may be removed at any time without notice; there is no deletion claim because no real data may be there.
Implementing data subject rights
For an erasure request under Art. 17 GDPR in your organization:
- Delete or deactivate the account of the data subject (administrator).
- Chat history of the data subject: sits in their browser, not on the server – the organization does not hold it and need not delete it. Server-side, conversation content sits only in the audit log, and only if the detail level is set to "High"; for its retention see item 4.
- Remove documents concerning the data subject from knowledge bases – this is content work, not a system function; the knowledge base search helps to find them.
- Audit entries are currently not deleted automatically – the retention slider has no effect yet, and the application provides no individual deletion. If an erasure request concerns audit entries with prompts, contact support@basebox.ai.
- Backups: include the rotation period in the answer.
- Export files (audit CSV, SIEM forwarding) – clean up in your own systems.
For access requests (Art. 15), the audit export and user management deliver the metadata; chat content can be viewed and saved by the user themselves (Back up chats).
What basebox does not do
basebox does not restore deleted data, does not use content for training and does not pass it on to third parties. On a server without an operations contract basebox cannot delete or restore anything for the simple reason that it has no access.
Next step: Cloud security → Isolation