Retention and data protection

Sealed Print stores each document only as long as it is needed. After the retention period of your organization, the document of a finished job is deleted; the job entry with its details stays in the queue. Admins choose the period within what the plan allows, and can delete finished jobs at any time.

Prerequisites

• Changing the retention needs the role Admin or Owner.
• The plan limits the period: 7 days on Free, up to 1 year on Team, and up to 100 years or unlimited on Business.

One-time setup

Choose the retention period

1. Go to Settings → Data retention.
2. Under Delete documents after, choose a period from 7 days up to the maximum of your plan. On Business, Unlimited keeps documents without a time limit.

The period counts from the moment a job is completed, failed or canceled. Afterwards only the document (the file) is deleted. Name, source, destination, status and timeline of the job stay.

Signed documents

Signed documents (the sealed PDF and the signing certificate) and the audit trail of their signature request are kept without a time limit, whatever the period. They are deleted only with the job: deleting such a job asks for an extra confirmation (Delete signed job), because the evidence of the signature is kept nowhere else.

Verification records of signed documents

For signed documents, Settings → Organization → Verification of signed documents decides how many years the verification record is kept (document name, signers' names and signing times) and whether the verification page shows the document while it is stored.

Every time

• Delete a job early: admins and owners open a finished job (completed, failed or canceled) in the queue and select Delete. The job is deleted with its document and timeline; this cannot be undone.
• Held jobs that nobody continues end with the retention period.
• Signed jobs are deleted only by hand (see above).
• Received emails are listed on inbound email addresses for 30 days.

How Sealed Print protects documents

• Every connection is encrypted with TLS. Printer URLs, API tokens and device passwords are stored as hashes or encrypted and can be renewed or revoked at any time.
• Sealed Print is hosted in Frankfurt am Main, Germany.
• Jobs printed through printer URLs are not end-to-end encrypted: Sealed Print processes them to deliver them, for example to convert them to PDF and to fit the print options to the printer.
• With the relay client and INFRA printers, documents stay within Sealed Print until they are printed. The outbound channels IPP push and email are marked Documents leave Sealed Print, because they hand documents to other systems.
• No analytics, no advertising cookies and no requests to third parties from the web app.

Details are in the privacy policy.

Troubleshooting

• "Your plan does not include this retention period": choose a shorter period or upgrade.
• "The document was deleted after the retention period": the job can no longer be printed or downloaded. Print it again from its source.
• Delete everything: an owner deletes the organization under Settings → Organization; all jobs and documents are deleted.

What's next

• Data processing agreement
• Plans and billing