Does the system implement a policy of data retention ?

[cesar-sanjuan]

Good morning
We've had the reporting channel up and running for a couple of years now.
Recently, our reporting user informed us that they no longer see all the processed reports in the report list and only see one report that is currently in progress.
We haven't made any changes to users, versions, or permissions. The reporting user doesn't have permission to delete reports or transfer them to other users.
Is there any option that would hide or delete reports after a certain period of time?
If we log in with the administrator account and go to the Audit Log, we only see one report in the report list.

[evilaliv3]

Dear @cesar-sanjuan

thank you for your question.

Yes we confirm that by default the system automatically delete reports after 3 months that is the default data retention policy.

You could vary this setting in the configuration of the channel. On the typical whistleblowing system this setting is conmfigured to 1 year.

You can verify the following:

• The audit log tracks the exact days when the system deleted each report;
• Users where notified via email 72 hours before the expiration of the report and every day till expiration and had the chance to change the expiration of the report

[cesar-sanjuan]

Thank you for your response.

Is it possible to recover the complaints?

Does setting the expiration date field to 0 mean they will never be canceled?

For complaints that have already been created but have not yet expired, is it possible to change the expiration date so that they do not expire?

Thanks

[evilaliv3]

Thank you for your response.

Thank you for your questions!

Is it possible to recover the complaints?
No unfortunately. The system delete data securely as needed in this context.

Does setting the expiration date field to 0 mean they will never be canceled?

Correct, unless you enable recipients to delete the data. We Consider setting 0 to be against any privacy by design and by default good practice. Please consider to use 1 or 2 year max as a default configuration.

For complaints that have already been created but have not yet expired, is it possible to change the expiration date so that they do not expire?
Yes; by default recipients has a privilege to change the expiration date and set a different date in the future; the system does not allow to disable deletion indefinitely though.

Thanks