For: admin · end-user
Delete a record
Records are soft-deleted by default. Hard delete requires admin + dual-control.
Open the record and click the ⋯ menu → "Delete". The record is moved to Deleted state.
Deleted records remain in the database and are recoverable from /modules/*/deleted for 30 days (Free/Team), 90 days (Business), or configurable up to 7 years (Enterprise).
Hard delete: tenant-admin opens /settings/data-retention and requests a hard delete. A second admin must approve within 72 hours, after which the data is irretrievably removed.