TendrlDocs / Surface / resources/data-retention
Data Retention
Surface keeps your scan history for a period set by your plan. Older scans are removed automatically by a daily sweep.
| Plan | Scan history |
|---|---|
| Free | 7 days |
| Starter | 30 days |
| Standard | 90 days |
| Pro | 1 year |
Retention is a maximum age, not a guarantee of deletion at that instant: the sweep runs once a day, so scans may persist a few hours past the window.
What the window covers
Your plan's window applies to your scan history (the per-scan record of what was submitted, what was found, and the verdict) along with any feedback you submitted about those scans.
Two things are deliberately not tied to your plan:
- Audit logs are kept for 90 days on every plan, so a security incident stays
- Threat intelligence is not your scan history. The reputation Surface builds
investigable regardless of tier.
from file hashes is platform-wide and permanent; expiring your scan history does not weaken detection for you or anyone else.
Verdicts outlive the record
A scan verdict is delivered when the scan completes: in the API response, the webhook, or the Contact file-transfer decision. Retention affects how long you can look the scan up afterwards, not whether it was scanned.
If you need a durable record of a specific verdict, capture the scan response at the time; that is the only copy guaranteed to outlive your retention window. Individual scans can also be exported one at a time from their detail page.
An IP blocked by a scan stays blocked after the scan record expires. If you need to see why an address was blocked, check it within your retention window.
Upgrading and downgrading
Upgrading extends the window from that point forward. It does not restore scans already removed.
Downgrading keeps your previous longer window for 30 days. Upgrading again during that period cancels the countdown.
If you need scan history preserved beyond your window, contact support during those 30 days and we can export it for you.
Manually billed accounts
Accounts on negotiated billing use whatever retention their agreement specifies. If no retention is set for such an account, its history is left alone rather than swept on a plan window.
Related
- Pricing: current plans and windows
- Contact data retention: the equivalent
for message history