Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.

Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
RSK-023 — Customer data is not removed when a contract ends

History

What is live now, and every settled version, newest first.

Version 3

Settled on Committed by Sam de Vries

Description

When a customer leaves, copies of its data remain in backups, tickets, and documentation. Data that is kept without a reason breaches the agreement and the GDPR, and it makes any later breach worse.

Measures

The offboarding checklist lists every place where customer data lives and who removes it, and the account manager asks the customer to confirm. The proof of deletion is stored with the record of the customer.

Accepted at
no value
Category
Compliance
Closed at
no value
Code
RSK-023
Identified at
2026-04-10
Inherent impact
3
Inherent likelihood
2
Residual impact
3 2
Residual likelihood
2 1
Status
Treating
Title
Customer data is not removed when a contract ends

Are you sure?

This action cannot be reverted.

Leave this page?

Your changes on this form are not saved. If you leave, they are lost.