All trust topics

Trust Center

Data Management

Plan how your team stores, shares, exports and removes workspace information.

Content updated: October 13, 2026

Where Content Is Used

Workspace information includes account and membership details, tasks, documents, messages and files. Some features also create recordings, transcripts, search indexes or AI conversations.

Deleting an item in one feature may not remove copies that were exported, downloaded, shared externally or sent to a connected service. Consider those copies when planning retention.

Control Access

  • Review workspace members, roles and shared content regularly.
  • Check public links before distributing them outside your team.
  • Remove integrations and access that are no longer needed.
  • Agree internally which information belongs in the workspace.

Request an Export

Contact the team if the export you need is not available in the product. Identify the workspace, categories of content, required format and deadline. We may need to verify your authority before providing data. Do not include credentials in your request.

Deletion and Retention

Supported items remain in trash for 30 days. A daily cleanup job then processes items older than 30 days, including their associated files and search-index records. The production job was checked on October 1, 2026: it is enabled with a 30-day retention setting, deletion enabled and recent successful runs. Cleanup follows the daily schedule rather than occurring at the exact moment an item reaches 30 days.

Edworking's confirmed account-removal policy is deactivation when removal is requested, followed by account erasure after 30 days. Verification of the account-erasure process is still in progress; the verified trash cleanup job does not establish that accounts are erased. Contact the team for confirmation of a specific account deletion, including the handling of shared workspace content and any records that must be retained.

Backups and Recovery

The Google Cloud Storage buckets used for private and public files have a seven-day soft-delete recovery period after an object is deleted from storage. This recovery period is separate from the 30-day product trash period. Object versioning is disabled on these two buckets. These settings were checked on October 1, 2026 and do not establish a tested recovery time or guarantee immediate erasure of every copy.

The PlanetScale production database schedule checked on October 1, 2026 runs every 12 hours and retains scheduled backups for two days. Backups protected from deletion can remain beyond that period. This database schedule does not describe the retention of files, logs or AI provider records.

Storage durability is different from recoverable backups. If your team needs a specific recovery window or recovery time, request current configuration and recovery evidence. Do not rely on an unconfirmed recovery objective.

Government and Public-Authority Requests

Edworking's policy requires requests for personal data from government or public authorities, including national-security requests, to be referred to the staff responsible for privacy and security before any disclosure. Requests should be sent to info@edworking.com.

  • Review legality: verify the requesting authority, applicable legal basis, jurisdiction and scope. Obtain qualified legal advice when needed before deciding how to respond.
  • Challenge unlawful requests: seek clarification, challenge or reject requests that are unlawful, disproportionate or outside the authority’s powers. Do not disclose data unless a valid legal basis has been established.
  • Minimize disclosure: provide only the specific data legally required, limit the time period and people covered, and use a secure delivery method after verifying the recipient.
  • Document decisions: keep a restricted-access record of the request, legal assessment, decision, staff involved, response and any data disclosed, subject to applicable confidentiality and retention requirements.

Notify the affected customer before disclosure where legally permitted. This policy describes the required process; it is not a report of past requests or disclosures.