Skip to content
ANTE

Security

Data Deletion & Offboarding Runbook

Last updated: 2026-10-20

← All security documents

Owner: Multibook Philippines Inc. · Version 1.2 · Last reviewed 2026-10-20 · Reviewed annually.

Commitment

On termination of the service, the customer’s workspace data is deleted within 30 days of termination or of the customer’s written request, and is removed from backups within a further 30 days (30-day backup rotation). Physical storage-media disposal is handled by DigitalOcean under their ISO 27001 / SOC 2 controls.

Offboarding procedure

  1. Confirm & record the request. Record date, requester, and scope; confirm the effective end date with the customer.
  2. Export on request. If requested, produce a data export (database export and/or file export) and deliver it securely before deletion.
  3. Delete tenant data (≤30 days). Within 30 days: delete/disable accounts and application data, remove customer-uploaded files from object storage, and remove customer-specific credentials/integrations.
  4. Audit records and support tickets. Support tickets that were resolved or closed are already deleted automatically 30 days after closing; any still-open tickets are deleted with the workspace. Audit and activity records are append-only and are not deleted at offboarding: they age out and are erased at 24 months from each event.
  5. Backups age out (≤ further 30 days). Daily database backups rotate on a 30-day schedule, so the data is purged from backups within 30 days of production deletion.
  6. Confirm to the customer. On request, issue a written deletion confirmation stating what was deleted, when production deletion completed, and when backups will have fully aged out.
  7. Decommission infrastructure (if dedicated). For a customer on a dedicated cloud instance, decommission the droplet(s) and detach/destroy the encrypted block-storage volume(s); DigitalOcean handles media sanitisation per their certifications.

Media disposal

ANTE does not own physical storage media. Block-storage volumes are encrypted at rest (LUKS/AES-256, DigitalOcean-managed keys). Physical media sanitisation/disposal is DigitalOcean’s responsibility under their ISO 27001 / SOC 2 programs.

Records we keep

Audit and activity logs for the workspace are kept for up to 24 months from each event, then erased. Our own billing and invoice records are kept for 5 years (National Internal Revenue Code Section 235, as amended by RA 11976). The customer’s own statutory records, such as payroll and accounting records, are the customer’s responsibility; it should export them before termination. See the Privacy Policy and Data deletion.

Evidence retained

The deletion request, the confirmation letter, and the relevant audit-log entries are retained (as part of the audit log, for up to 24 months) as a record of completion.