Data handling
Review replicas, retention, erasure, and disconnection.
Read replica
Cloud stores an app-scoped read replica of users, sessions, organisations, audit activity, and safe delivery metadata. Personally identifiable replica fields use a per-app data key protected by the deployment master key. The application database remains the source of truth.
Erasure
A priority user deletion removes the user's Cloud projections, sessions, organisation membership and ownership references, ingested events, audit entries, incidents, location history, delivery metadata, pending remote commands, and pending exports. A deletion high-water mark prevents stale events from restoring the data.
Disconnect
Disconnecting revokes the app's Cloud access immediately. Cloud deletes the app's data within 30 days. Authentication in the application continues normally.