Security questionnaire answers › Privacy
How long do you retain customer data and how is it deleted? How to answer it in a security questionnaire
Why buyers ask this
Buyers want data deleted when it is no longer needed or when the contract ends.
What a strong answer includes
- State retention during the contract and the deletion window after termination.
- Explain how backups age out and whether deletion is certified on request.
- Offer data export before deletion.
Sample answer to adapt
Replace the bracketed parts with your own facts. Only state what is true for your environment.
Customer data is retained for the term of the agreement. After termination it is deleted within [30 days] and removed from backups within [35 days]. Customers can export their data before deletion, and we confirm deletion in writing on request.
Evidence to attach
- Data retention policy
- Deletion procedure
- DPA deletion clause
Common mistakes
- Deletion promise that ignores backups.
Answer questionnaires from your own documents
Korrali Trust drafts answers from your policies and evidence so every response traces back to its source, and a person reviews it before it goes out.