Tandem Data Export and Deletion Version 2026-09-05-draft.1
Draft for product-owner and UK specialist review. This revision does not authorise paid launch or replace a signed customer agreement.
The Company controls its operational records. Workers should contact their Company administrator or privacy contact about those records. Requests concerning the provider's own account records should use the privacy contact identified in the customer agreement. Verify the requester and their authority before disclosing, exporting or deleting information.
Removing membership ends access and must not erase valid operational, financial, safety or audit history. Transfer ownership before the last Owner leaves. Disabling a module retains existing records in a read-only, exportable state.
Company closure must include a usable export and a documented retention decision. Legal holds, disputes and applicable statutory obligations may require retention. Deletion must follow the applicable schedule and include the treatment of backups and restored copies. Exact retention and recovery periods require approval before launch.
A request is not completed merely because an account is disabled. Record its scope, authority, decision, actions and outcome through the supported workflow. Explain any retention exception and keep access to retained information restricted.



