GDPR controls

Article 15 + Article 17 self-service. All actions audit-logged with severity=info (export) or critical (erasure).

Article 15 — Right of access

Download a complete JSON bundle of every record we hold tied to your tenant: tenant metadata, all API keys (no plaintext), 90 days of API usage, all score results, all ESG assessments, all ERP connections (no token ciphertext), 90 days of audit log, and the data-minimization notes that explain what's deliberately omitted.

Synchronous — the response IS the bundle.
Triggers a gdpr.exported webhook event for your audit pipeline.
Included data_minimization_notes: API key hashes are one-way and not retrievable; ERP OAuth tokens are encrypted at rest and not exportable; audit-log rows older than 90 days come from the S3 WORM archive (request via support).

Article 17 — Right to erasure

Destructive and irreversible. Anonymizes PII (contact email, IPs, user-agents, names) on every row tied to your tenant; sets tenant status to terminated; revokes every API key including the one calling this. The rows themselves are retained with PII redacted under Lei 83/2017 (PT AML) — 7-year mandate for transaction-related records.

Triggers a gdpr.erased webhook BEFORE the redaction so your receiver captures the receipt.

You will be locked out the moment this completes. Save the response — it's your receipt.