Use: complete when a customer data-deletion request is fulfilled (e.g., on contract termination or a deletion request). Owner: CTO / Engineering, verified by CISO. File in the SharePoint evidence library / Linear. Frameworks: SOC 2 DCH-1 (customer data deleted upon leaving); supports CC6.5 / confidentiality criterion; GDPR Art. 17 / CCPA right to delete. Implements Records Disposal and the DPA. Vanta slot: customer-data-deletion-record.
Fill at the time of deletion — factual. Replace every {{placeholder}}.

Request

  • Customer / data subject: {{customer_subject}} · Request type: {{request_type}}
  • Received: {{received_date}} · Verification: {{requester_verification}}
  • Contractual / statutory deadline: {{deadline}}

Scope of deletion

  • Data categories / systems: {{data_categories_systems}}
  • Backups: {{backups_note}}

Execution

SystemDeletion methodCompleted (timestamp)By
{{system_1}}{{method_1}}{{completed_1}}{{by_1}}
{{system_2}}{{method_2}}{{completed_2}}{{by_2}}
{{system_3}}{{method_3}}{{completed_3}}{{by_3}}

Verification

  • CISO confirmation deletion is complete & verifiable (incl. backups): {{ciso_confirmation_name}} / {{ciso_confirmation_date}}
  • Confirmation sent to requester: {{requester_confirmation_date}}

Sign-off

  • Engineering: {{engineering_name}} / {{engineering_date}} · CISO: {{ciso_name}} / {{ciso_date}}

Variables

VariableDescription
{{customer_subject}}Customer or data-subject name / account
{{request_type}}Request type (e.g., contract termination / DSR deletion)
{{received_date}}Date the request was received
{{requester_verification}}How the requester was verified
{{deadline}}Contractual or statutory deadline (e.g., 60 days post-termination per DPA)
{{data_categories_systems}}Data categories / systems in scope (e.g., production DB, object storage, search, derived data, logs)
{{backups_note}}Note on residual encrypted-backup copies and the backup-retention window
{{system_1}}Execution row 1 — system (e.g., Aurora/Postgres)
{{method_1}}Execution row 1 — deletion method
{{completed_1}}Execution row 1 — completion timestamp
{{by_1}}Execution row 1 — performed by
{{system_2}}Execution row 2 — system (e.g., object storage)
{{method_2}}Execution row 2 — deletion method
{{completed_2}}Execution row 2 — completion timestamp
{{by_2}}Execution row 2 — performed by
{{system_3}}Execution row 3 — system (e.g., search / cache / derived)
{{method_3}}Execution row 3 — deletion method
{{completed_3}}Execution row 3 — completion timestamp
{{by_3}}Execution row 3 — performed by
{{ciso_confirmation_name}}Name of CISO confirming deletion is complete and verifiable
{{ciso_confirmation_date}}Date of CISO completeness confirmation
{{requester_confirmation_date}}Date confirmation was sent to the requester
{{engineering_name}}Engineering sign-off — name
{{engineering_date}}Engineering sign-off — date
{{ciso_name}}CISO sign-off — name
{{ciso_date}}CISO sign-off — date

Cross-references