Data Retention Policy

This policy describes how Continuous Compliance, LLC retains and deletes client data on the CyberIllumination™ service. It supplements our Privacy Policy.

Retention during an active subscription

Your data is retained for as long as your subscription (or beta participation) remains active.

The Data Retention Period

When your subscription becomes inactive — whether cancelled by you or terminated by us — your non-anonymized, detailed data is retained for six (6) months (the “Data Retention Period”), during which you may request an export of your data or re-establish a subscription. At the end of the Data Retention Period, that data is deleted with no option for recovery.

What is retained after deletion

• Anonymized, aggregated data used for industry and peer analysis, presented so that it does not reveal you as the source or subject.
• Website contact information used for support.
• Records we are legally required to retain, for the period the law requires.

Access logs

Access logs recording views of your shared data are retained for the life of your account plus the Data Retention Period, because they are part of your audit trail. Organizations that viewed your data do not retain your underlying data through the access log.

Shortening the Data Retention Period

After your subscription becomes inactive, you may request that the Data Retention Period be shortened by contacting privacy@cyberillumination.us. Such requests are subject to a balancing of your interest in the data against the interests of the Company and other users of the service, as described in the Privacy Policy.

Backups

Deleted data may persist in encrypted backups for up to ninety (90) additional days before those backups are rotated out, after which it is unrecoverable.

Version

Change Log:
26.08a – 04-AUG-2026 – Initial CyberIllumination™ publication.