Data retention

Public calculator inputs are not stored by default. We retain only the operational information needed to keep the service reliable and accountable.

Public estimates

Minimal metadata may include a correlation ID, rule-package version, response status, duration, and coarse anonymous usage measurements. The default retention period is 30 days. Raw income and deduction inputs are not retained by the public gateway.

Authenticated business calculations

Payroll requests may be retained for up to 365 days by default so an authorized tenant user can audit or rerun a calculation against the exact original package and strategy. Contractual enterprise settings may use a different disclosed period.

Security records

Request metadata is retained for 90 days by default. Security and audit events may be retained for up to 730 days where required for fraud prevention, incident response, or contractual obligations. Expired records are removed by an automated privileged cleanup process.

See the broader privacy summary.