Retention of suspended accounts (automatic deletion)

Your organization is the data controller and decides how long it keeps the accounts of people who left. The service can automatically delete suspended accounts with no activity for a number of days.

How do I turn the rule on?

1. Open «Manage» › «Privacy» («Retention of suspended accounts»). Confirm if «Confirm with passkey to view and change» appears.
2. In «Automatically delete suspended accounts with no activity for (days)», type a number between 30 and 3650.
3. Choose «Save».

An empty field turns the rule off (the default). The console sums it up: «Empty turns the rule off. Between 30 and 3650 days. Deletion replaces the email, disables the account and keeps the audit pseudonymized.»

When is the account deleted?

A periodic sweep (every 6 hours by default) deletes the accounts that reached the limit. Deletion happens at the first sweep after the limit, not at the exact minute.

What does deletion mean?

The same as a GDPR erasure:

• the email is replaced by a meaningless value and the account is disabled and frozen;
• every session ends and phones are revoked;
• device names, notes and references are erased;
• the audit and signed receipts stay, in pseudonymous form.

See GDPR requests.

Accounts managed by a directory

A person managed by an active directory connector should be deleted at the source.

Errors