Configuration
Data Retention
Configure automated retention policies, GDPR right-to-erasure workflows, and log archiving.
Overview
Asiyst provides granular data retention controls to help organizations meet strict corporate compliance standards, including GDPR, HIPAA, SOC 2 Type II, and PCI-DSS.
Retention Tiers & Policies
Configure retention duration per data category in Project > Settings > Data Retention:
| Data Type | Default Retention | Configurable Options | Notes |
|---|---|---|---|
| Conversation Transcripts | 90 days | 30, 60, 90, 365 days, or Indefinite | User and assistant message text |
| Aggregated Analytics | 365 days | 90, 365, 730 days | Daily rollups of visitor counts and CTR |
| Raw Telemetry Events | 30 days | 7, 14, 30, 90 days | Granular click and scroll event streams |
| Audit Logs | 365 days | 365 days (Fixed on Enterprise) | Team logins, key rotations, and setting changes |
Cryptographic Data Purging Pipeline
When data reaches its retention threshold:
- Records are marked for deletion in the primary PostgreSQL database.
- An automated worker executes cryptographic scrubbing, zeroing out message text and associated vector chunks.
- Encrypted backups overwrite purged records within 14 calendar days.
GDPR & CCPA Deletion API
Execute immediate data erasure for specific visitors upon request:
curl -X DELETE "https://asiyst.com/api/v1/projects/proj_9f8a2b3c4d/visitors/usr_10293/data" \
-H "Authorization: Bearer $ASIYST_API_TOKEN"
Response:
{
"status": "PURGED",
"visitorId": "usr_10293",
"deletedConversations": 6,
"deletedMessages": 28,
"timestamp": "2026-09-28T04:00:00Z"
}
Automated Cold Storage Archiving
Enterprise plans can stream raw transcripts to their own Amazon S3 or Google Cloud Storage bucket before purging from Asiyst databases.