Audit-trail retention and redaction (GDPR).
List audit retention policies
Returns every per-event-type retention rule configured for the calling organization. The special event_type * is the org-wide default applied when no event-type-specific rule matches. Admin-only.
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
List audit retention policies › Responses
OK
Upsert an audit retention policy
Sets or updates a single (event_type → retention_days) rule. Use * for the org-wide default. Retention is applied by the periodic GDPR sweep - rows older than retention_days get their payload nulled out (the row envelope stays so an integrity audit can prove no row was deleted). Admin-only.
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Upsert an audit retention policy › Responses
OK
Delete an audit retention policy
Removes the retention rule for the given event_type. Idempotent - returns 204 even if no rule existed. After deletion, the org-wide * default applies (or rows are kept indefinitely if no default is set). Admin-only.
path Parameters
eventTypeEvent type key (use '*' for the org-wide default)
Event type key (use '*' for the org-wide default)
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Delete an audit retention policy › Responses
No Content
Redact a customer's audit trail (GDPR)
Triggers a GDPR right-to-be-forgotten erasure for the given customer. Nulls payload, customer_payload, and actor PII on every audit row tied to the customer; the row envelope (id, occurred_at, event_type) stays so an integrity audit can still prove no row was deleted. Returns the count of redacted rows. Admin-only.
path Parameters
idCustomer UUID
Customer UUID
Headers
Idempotency-KeyUnique key that makes this POST safe to retry: repeats with the same key replay the first response instead of re-executing. Replays are scoped to the retrying principal (same API key / user) and kept for 24 hours. Required on every POST.
Client-generated idempotency key (e.g. a UUID).
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Redact a customer's audit trail (GDPR) › Responses
OK