Free tier retention
90 days from receipt issuance. After 90 days the receipt content is archived; metadata (count, agent, project) is retained for trust score continuity.
Paid tier retention
Indefinite. Receipts remain queryable, verifiable, exportable. Long-term storage is included.
Custom retention
Enterprise can override per-project. GxP-validated systems may require 25+ years; legal hold scenarios may require litigation-window retention. Configure via /admin/retention.
Deletion on demand
GDPR right to erasure. /v1/receipts/[id] DELETE. Receipt content is removed; cryptographic record of "a receipt existed at this ID" is retained for chain-of-custody.
Cold storage
After 12 months, receipts move to cold storage automatically. Retrieval adds ~3 second latency on first access; subsequent access is hot.
Export before downgrade
If downgrading to Free tier with paid-tier receipts beyond the Free quota: export first via /v1/receipts/export. The export is signed and self-verifiable.