Your data: export and deletion

The principle

Your engineering data is yours. You can take all of it out on any day, in open formats, without asking us, and you can have it deleted when you leave. Nothing in the licence or the product holds it hostage.

Exporting it yourself, at any time

An organisation owner signs in, opens the Organisation console and goes to Data. Three downloads are there:

• The organisation bundle, one JSON file holding the organisation record, its members and teams, and every programme with its analyses, requirements, graph, documents and metadata. It opens in any text editor and is the exit export.
• ReqIF per programme, the requirements interchange format that DOORS, Jama and Polarion import.
• A member’s personal data (the DSAR export): everything the product holds about one person as a person, for a subject access request or for offboarding.

Frozen submission packs and baselines download as PDF from their own pages. Uploaded source files (the PDFs and spreadsheets you ingested) are not inside the bundle for size reasons; the bundle’s manifest says so, and we will provide them on request within the deletion timescale below.

Deleting it

To delete an organisation and everything in it, the organisation owner emails info@certprove.comfrom the address on the account, naming the organisation. Then:

• We confirm receipt within 5 working days and verify the request came from an owner.
• We export the bundle for you first if you ask, so nothing is deleted that you still wanted.
• We delete the organisation, its programmes and its members’ personal data from the live database within 30 days of verification, and confirm in writing.
• Encrypted database backups age out within a further 90 days; nothing is restored from them except to recover the whole service after a failure, and a deleted organisation is deleted again if that ever happens.

One person can ask for their own account to be removed from an organisation the same way; the signatures and authorship they recorded stay attributed to their name in the certification record, because a certification record that forgets who signed it is not a record, and the law allows that retention.

Archiving instead

If you want a programme out of the way but not gone, an owner can archive it from the same Data page. An archived programme is excluded from every screen and every API until it is restored, and nothing in the product can read or write it in the meantime.

Your rights as a person

Access, correction, export, deletion, restriction, objection and withdrawal of consent are set out in the privacy notice. Write to info@certprove.com; we answer within one month. In the UK you may complain to the Information Commissioner’s Office; in the EU to your supervisory authority.