Right to Erasure (GDPR Article 17)

Deletion request

Last updated: 21 August 2026

Under GDPR Article 17 you may request erasure of the personal data Audact processes about you. Erasure is carried out by crypto-shredding (coming soon): the key that decrypts the payload will be destroyed, so the sequence remains checkable while the content is gone — where the customer contract requires it, and under DORA where the customer is a financial entity.

1. How to submit

Email privacy@audact.aiwith the fields below. We respond within 30 days.

Full name (as it appears on government ID)
Account or customer reference, if applicable
Data to be erased — specific identifiers and / or time range
Identity verification method (secure upload link provided)
Lawful basis cited under Article 17(1)(a-f)

Open pre-filled email

2. Statutory retention exceptions

Article 50 of the AI Act sets a transparency duty and no retention period. Disclosure attestations are kept under this agreement, for the period set in DPA section 2A by the rule that applies to the Customer's own sector. The record-keeping and incident logs that DORA (Regulation (EU) 2022/2554, directly applicable since 17 January 2025) requires of financial entities must also be retained. In those cases erasure is carried out by crypto-shredding (coming soon): the key that decrypts the payload will be destroyed, so the sequence remains checkable while the content is gone.

Version history

Last amended on 21 August 2026. Earlier versions of this document are available on request.