Skip to content
Qtangl logo mark
Qtangl

Developer portal

Data retention & lifecycle

Unified retention policy for production tenants. Pilot deployments may use shorter TTLs.

Last updated: 2026-06-09

Scan data

  • Scan metadata and reports persist per tenant when Postgres is enabled.
  • Default evidence retention: 12 months (configurable via tenant settings).
  • Explicit retention: POST /tenant/evidence/{scanId}/retain
  • Delete individual scans: DELETE /tenant/scans/{scanId}

Ephemeral data

  • Upload bundle sessions: 24-hour TTL.
  • Webhook DLQ entries: 30 days after successful replay.
  • Schedule run logs: 90-day TTL sweep.
  • Rate-limit counters: rolling 60-second window only.

Offboarding & DSAR

Full tenant deletion via DELETE /tenant/data (operator+) or POST /tenant/offboard (admin). Removes scans, webhooks, integrations, audit log, settings, and blob storage. See Data model guide.

Enterprise agreements

Custom retention windows and EU residency available by contract. Contact charley@qtangl.com. See Data residency.

Found an issue? Report documentation feedback