Connect by JBRH Open Connect

How long the record is kept

Decision records are ordinary workspace data in PostgreSQL under row-level security, so their lifetime is the workspace's lifetime. No age-based deletion schedule for them is documented, and this page does not invent one. In practice what limits an investigation is not age but scope: the log keeps decisions and their rules, not the wording of messages.

Status
Available What this means
Audience
both
In the app
#/autonomy-audit
Last verified
Product version
6.3.2

What is actually known#

  • Decision records live in the workspace's own database rows, protected by row-level security like every other scoped record.
  • They are therefore removed when the workspace itself is removed, along with the rest of its data.
  • No published rule prunes them by age. If a workspace needs a specific retention period for a contractual or regulatory reason, that is a question to raise rather than an assumption to make.
  • The related question of how long *other* categories of data are kept is covered by Data retention, which is the right place for a policy answer.

What limits an investigation in practice#

Age is rarely the constraint people meet. Three other properties of the record decide whether a question can be answered, and all three are consequences of what the log is for.

You want to knowThe log gives youWhere the rest is
Who released this and whenThe decision, the actor and the ruleNothing further needed
What the message actually saidThat a reply was released on that threadThe conversation itself
Why the customer says they never received itThe provider's acknowledgement, or the uncertain stateThe provider's own records, beyond Connect
What Connect knew at the timeThe rule in force, not the knowledge in forceMemory and Knowledge, which record their own history of changes

Working with the record over a long period#

  1. Capture the context you will want later at the moment of the decision, not afterwards.

    Result A note on the relationship saying why an exception was set is worth more in a year than any amount of log reading.

  2. Investigate a disputed send while the provider still has its own records.

    Result Connect keeps its acknowledgement; the provider keeps the delivery detail, and that side has its own retention you do not control.

  3. Before deleting a workspace, take what you need out of it.

    Result Deleting the workspace removes its records with it, and that is the one event with a certain effect on this data.

Why the record is durable by construction#

The log is not a rolling application log of the sort that is rotated and discarded. It holds one row per decision, containing the decision, the actor, the rule and the outcome — not stack traces, not internal paths, not raw provider error text. That shape is what makes keeping it indefinitely reasonable, and it is also why it does not grow the way a diagnostic log does.

It is also why the record stays readable after the code that produced it has changed. An entry naming the rule in force at the time keeps meaning something after the settings screen has been redesigned, which a reference to a configuration that no longer exists would not.

Questions#

So how many days are decision records kept for?

No such period is documented, and this page will not name one. What is documented is that the records are workspace data under row-level security and go when the workspace goes. If you need a contractual answer, ask for one rather than inferring it.

Can I export the record for my own archive?

The Decision Log is a screen within the product; it is not one of the sheets in the Data grid, so there is no grid export of it. Treat any archive requirement as a question to raise before you rely on it.

Does deleting a conversation remove its decisions?

The decision record is a separate row from the conversation. What removes it with certainty is removal of the workspace itself; anything narrower should be confirmed rather than assumed.