Your data principals' rights are real,
automated, and on the clock.
Access, rectification, erasure, portability, objection, restriction - responded to within the regulator's deadline, every time.
The eight data subject rights
Right to Access
Request all data tied to you across services. Verified via email, MFA, or government ID. Portable export (JSON/CSV) within 30 days (15 days for DPDP Act).
Right to Rectification
Correct any data. Lineage records before-and-after state for audit.
Right to Erasure
Cascade across all storage: primary, derived caches, search indexes, backup catalogs. Backups: cryptographic erasure (key destruction). Audit logs pseudonymized but retained.
Right to Portability
Structured export (JSON, CSV) of your conversation history, project artifacts, and member metadata.
Right to Object
Stops processing under contested purposes. Principal-specific processing-suspension flag honored across all services.
Right to Restrict
Data may be stored but not actively used. Queries respect the restriction marker.
Right to Automated decisions
WorkSwarm's AI is advisory - high-blast-radius actions require human approval. This right is satisfied by design.
Right to Non-discrimination
You cannot be denied service or charged differently for exercising any right. Contractually prohibited.
Consent management
Every collection of sensitive data carries a consent token that records:
- Who consented (data principal identifier)
- When (timestamp, signed)
- What for (purpose code from controlled list)
- Until when (expiry - defaults to purpose completion)
- By what method (clickwrap, signed form, voice, parental)
- Withdrawal record (if revoked)
Withdrawal triggers cessation of processing, deletion or de-identification, and downstream sub-processor notification.
Retention & deletion
| Data class | Default TTL |
|---|---|
| Conversation message | 7 years (audit) |
| Voice recording | 90 days |
| AI prompt log | 30 days redacted, 7 years pseudonymized |
| Audit log | 7 years (SOC 2, SOX, IRDAI) |
| User profile | Until deletion request + 30-day grace |
| Billing record | 8 years (Companies Act) |
PII redaction at every boundary
Every outbound boundary - LLM provider, connector, audit destination, SIEM - passes through a configurable redaction layer.