DEMO TENANTOperator-side data (staff, contacts, calendar, training, grants, complaints, SAR, four-eyes reviews) is illustrative — not a real Greentube record. Connector output, evidence-ledger anchors, RFC 3161 timestamps, Postgres RLS, regulator-source ingestion and LLM extractions are the real machine. Rows marked demo are seeded fixtures.
Georg Gubo
MGA · UKGC · ADM · RO-ONJN · SK-MFSR · DGOJ · GGL · SPI · NJ-DGE · MI-MGCB · PA-PGCB
← Controls library

Operator data deleted within 30 days of contract termination

SOC2.C1.RETENTION · GLOBAL · data_protection
Severity
critical
Cadence
monthly
Region
global
Current status (Greentube Internet Entertainment Solutions GmbH)
not evaluated

Requirement

Within 30 days of an operator contract ending, all operator-specific evidence ledger entries, evaluation records, and connector configuration must be deleted from primary storage and from backups on the next backup rotation.

Source: AICPA TSC — C1 Confidentiality (retention on contract end)

Evidence specification

Evidence typeConnectorSpecAcceptance criteria
doc_presencedoc-sharepoint
{
  "path": "/audit-trail/deletion-log.csv",
  "required_fields": [
    "operator_id",
    "terminated_at",
    "deleted_at",
    "confirmed_by"
  ]
}
  • every terminated operator has deleted_at within 30 days of terminated_at

Recent evaluations (Greentube Internet Entertainment Solutions GmbH)

No evaluation history for this control yet.