What happens to documents when the retention period ends?

Each program sets how long documents and audit logs are kept, and both are removed automatically when the period ends, with the removal itself logged. That supports the AMLR principle that due diligence records are kept for a defined period and then deleted, rather than left in mailboxes and synced devices indefinitely.

Retention by design

KYB documents contain identity data, company records and bank details. Anti-money-laundering rules require them to be kept for a defined period after the relationship ends, usually five years under the EU AML framework, and data protection rules require them to be deleted afterwards. Mailboxes and shared drives do neither reliably.

On the platform

• Each program sets its retention period for documents and for audit logs.
• When the period ends, documents and logs are removed automatically.
• The removal itself is logged, so the operator can show that deletion happened and when.

Why this matters

The AML Regulation (AMLR) confirms the principle that due diligence records are kept for a defined period and then deleted. An operator that cannot prove deletion carries both a data protection exposure and an operational burden: old files in old mailboxes, synced to devices that left the company. Automatic retention turns a policy into a mechanism, and the deletion log answers the auditor's question before it is asked. Programs with different obligations, for example in different countries, set different periods.