File and decision retention

Original files: 24 hours. Reports: seven days. Operational receipts: 30 days. Approved contracts and baselines: until deletion. Financial reconciliation identities follow the shared payment record policy. Raw files and result files are excluded from metadata backups.

Reports include counts and at most 20 one-based record references per failed rule, without raw values. Fingerprints and hashes are not a promise of anonymity. Use only destination rules you have authority to approve.

At most 50 active uploads / 128 MiB and three pending checks per organization. Each check runs in a process limited to 384 MiB memory, 60 CPU seconds, 64 MiB output and 120 wall-clock seconds. Resource failures are errors and release the credit.

UTF-8 flat CSV/JSONL only; nested records, malformed widths, duplicate JSON keys, nonfinite numeric values and unsupported rules fail closed. Delete contracts/baselines through the API; pending checks using deleted decisions fail safely. The original-data download expires with its source file after 24 hours.