Evidence Retention Policy
INTERNAL USE — OPERATOR / DESIGN-PARTNER OPS. Same substance as the gated customer draft. Safe for internal runbooks, IT release-readiness, and answering “how long do we keep evidence?” inside AmazFlow. Do not paste Term+30 into customer-facing marketing, the Security page, or the Privacy schedule as a binding public promise until MSA §9.6 is greenlit. For external conversation before greenlight, use Claims Clearance: “as agreed in the Order Form / MSA.”
Gated status
Operator summary
- Evidence Records = workflow run history, verification results, evidence captures, approval/escalation history, and related audit history for that Customer’s Workflows.
- Target default (aligned to MSA Draft v0.2 §9.6 and IT design-partner bar): retain for Subscription Term + 30 days after that Subscription Term ends, unless the Order Form sets a different window.
- Export: during that window, Customer may request export of Evidence Records with other Customer Content (MSA Draft §8.7 — 30-day export window on written request). After the retention window, delete or de-identify per DPA, except law / dispute / enforcement holds.
- Backups: live delete ≠ instant backup purge; Privacy schedule backup window (≤35 days) still applies.
- Access: Customer admins + AmazFlow need-to-know operators; logged; prefer run IDs over pasting regulated records into support tools (Subprocessors / AUP posture).
- Honesty: evidence packs = runs / checks / approvals. Not business-outcome warranties. Not SOC 2. Not blanket HIPAA.
- Until founder greenlight: do not tell customers the Term+30 default is already a standing AmazFlow public policy; say retention is as agreed in OF/MSA, and keep Term+30 as the internal design-partner / draft-MSA target.
One-liners
Operator one-liner (internal). We retain Evidence Records for the subscription term plus 30 days as our draft-MSA / design-partner default; OF can override; export on request during the window; packs document runs, verification, and approvals — not certifications or business outcomes.
External one-liner (pre-greenlight). Every design-partner workflow we call live keeps a retrievable evidence and audit trail. Retention is as agreed in your Order Form and MSA.