Data retention

Production data should be retained only for assessment administration, marking, review, and audit purposes.

Deletion must consider both Postgres rows and private Storage objects. Database backups do not automatically remove or back up Storage files.

Owner retention requests are tracked in the database so deletion and export decisions are auditable.

Before using Exam Vault for formal school records, define a written retention schedule and backup restoration procedure.