How long is our data retained?

Operational retention is configured per deployment. Under the DPA, data is deleted or returned within 30 days of your election when the agreement ends, backups excepted.

Operational retention, meaning how long traces and recordings stay queryable and what gets exported to your systems, is configured for your deployment, because audit and records requirements differ by customer and regulator.

Contractual deletion is defined in the DPA: when the agreement ends, Context deletes or returns customer personal data at your election made within thirty days, except where law requires retention or the data sits in routine backups, which remain protected and are deleted on the standard schedule. See deletion and return.

Written for it and security, finance and procurement. Last reviewed 2026-09-15.

Still need an answer?

Tell us what you were looking for and we reply within one business day.

Contact the team →

Running a security review?

Documents, controls, and the request form live in the Trust Center.

Open the Trust Center →

Something to report?

Security findings go straight to the people who fix them.

security@context.ai