Data export for leaving customers

Owner: Ana Ruiz · Epic: ENG-1601 · Shipped: Monday 24 August · Shaped in Emargen as "Data export for leaving customers"

Why

Pellham Transport left on 31 July partly because they couldn't take their data with them. Engineering made them a one-off export by hand, which took four days (Pellham Transport: exit notes). Every customer should be able to take everything we hold for them, any time.

What we built

• Settings › Export your data, for administrators. ACME can also start it for a customer at the end of their contract.
• A ZIP file of CSV files: people, depots, roles and assignments, access requests with every decision, the audit log, single sign-on settings without any secrets, and a README describing each file.
• Made in the customer's region. The download link works for 7 days and needs an administrator's sign-in.
• Each export is written to the audit log.

What we left out

• Passwords, recovery codes and API key secrets. Never exported.
• An export in another product's format.

After a contract ends

Access ends on the contract's last day. The customer's data is deleted 30 days later, and backups age out within 35 days after that.