Home / Documentation / Account Management / 07 - Deletion Process
Privacy & Compliance Last updated: Oct 24, 2025

07 - Data Deletion Process

A transparent, secure, and fully compliant workflow for requesting, verifying, and permanently erasing your data from the CloudNexus platform.

CloudNexus is committed to data minimization and user sovereignty. This document outlines the standardized lifecycle for data deletion requests, ensuring alignment with GDPR, CCPA, SOC 2, and industry best practices.

ℹ️
Scope & Retention Policy

Upon completion, all personally identifiable information (PII), application data, logs, and backups associated with your account will be permanently erased. System-level metadata required for legal compliance will be retained in anonymized form for up to 24 months.

Deletion Lifecycle

The process follows a five-stage pipeline designed to prevent accidental data loss while ensuring swift, verifiable erasure.

1

Request Submission

Initiate deletion via the Dashboard, API, or support ticket. The system generates a unique request ID and pauses all automated backups.

Immediate
2

Identity & Authority Verification

Multi-factor authentication and administrative privilege checks are enforced. Secondary approval is required for enterprise accounts.

1–4 hours
3

14-Day Cooling Period

A mandatory grace period allows accidental or coerced requests to be canceled. During this window, data remains read-only and inaccessible.

Fixed window
4

Secure Erasure & Sanitization

Data is cryptographically shredded across all primary storage, secondary replicas, and edge caches. Database indices and object stores are purged.

2–7 business days
5

Confirmation & Audit Logging

A signed deletion certificate and immutable audit trail entry are generated. The account transitions to TERMINATED status.

Immediate

How to Request Deletion

Dashboard UI

Navigate to Settings > Account > Data Management and click "Request Account Deletion". Follow the guided workflow.

REST API

For programmatic workflows, use the following endpoint:

POST /v1/accounts/{account_id}/data/delete
Authorization: Bearer <API_KEY>
Content-Type: application/json

{
  "reason": "compliance_review",
  "include_backups": true,
  "notify_admins": true
}
⚠️
Irreversible Action

The API endpoint requires the admin.delete scope and will trigger the cooling period automatically. Dry-run mode is available by appending ?dry_run=true.

Email & Support

Submit a verified request to privacy@cloudnexus.io with the subject line: DATA DELETION REQUEST - [Account ID]. Our compliance team will respond within 24 hours.

Compliance & Legal Framework

  • GDPR (Articles 17 & 20): Right to erasure and data portability are fully supported. Export bundles are available prior to deletion.
  • CCPA/CPRA: California residents may opt out of sale/sharing and request deletion. Service animal and business exceptions apply.
  • SOC 2 Type II: All erasure operations are logged, verified by independent auditors, and meet cryptographic destruction standards (NIST SP 800-88).
  • Data Residency: Deletion respects regional data boundaries. Cross-border replication is synchronized prior to purge.

Frequently Asked Questions

Can I cancel a deletion request?
Yes. Requests can be canceled anytime during the 14-day cooling period via the Dashboard or by contacting support with your request ID. After this window, data begins permanent sanitization and cannot be recovered.
What happens to my billing and invoices?
All active subscriptions are immediately prorated and terminated. Final invoices are issued, and outstanding balances must be settled. Historical billing records are retained for tax compliance but are anonymized and detached from your identity.
Are backups included in the deletion?
By default, yes. You can opt out of backup deletion in the request payload to retain them for disaster recovery, but they will be isolated and encrypted with keys controlled by your account.
How long does the entire process take?
Standard requests complete within 14–21 days (including the cooling period). Enterprise accounts with complex multi-region deployments may take up to 30 days to ensure full synchronization and verification.
Will I receive proof of deletion?
Yes. Upon completion, you'll receive a cryptographically signed deletion certificate via email and the API. This document includes timestamps, storage systems purged, and a compliance reference ID.
✓
Need Assistance?

Our Data Protection Officer (DPO) team is available at dpo@cloudnexus.io or via the secure support portal for complex compliance queries.