Your data controls: export, deletion and MFA
The controls a data-privacy review expects to find: version history, export, permanent erasure, account purge and step-up MFA.
- Version history and diff. Documents are versioned, and you can view and compare earlier versions.
- Export. Export your data yourself, for portability.
- Permanent erasure. Delete a document permanently, or purge an entire account or tenant to answer a data-subject erasure request under the Nigeria Data Protection Act (NDPA) 2023.
- Step-up MFA. Sensitive actions require a second factor at the moment you perform them, not just at login.
What is retained by design
Append-only legal records (the audit log and financial ledgers) survive an account purge on purpose. The audit log keeps the record that a deletion occurred, and ledgers must persist for compliance. Everything else is removed.
Related documentation
Data privacy and the no-training policy
Your documents are never used to train public models, and Nigerian data-protection handling under the Nigeria Data Protection Act (NDPA) 2023 is built into the platform.
Security architecture: isolation, encryption and access
Tenant isolation enforced in both the app and the database, AES-256 encryption with keys sourced from a KMS, and access gated by role and MFA.