Export and deletion

Export the organization

An owner can export everything the organization holds as one JSON file: settings and policy, domains, members, invitations, teams, folders, boards with their comments, grants and links, agents’ settings, API keys, identity providers, provisioning tokens, audit streams, and the whole audit trail.

• Board contents are decrypted in the export: it is your data, readable.
• No credential is in it: no key, token, secret or password hash — only that they exist, and their dates.
• It asks for a second factor, is limited to three per ten minutes, and is recorded before the first byte is sent.

This is the export a data processing agreement promises at the end of a contract.

Delete the organization

Only an owner, with a second factor. Deletion is scheduled 30 days out:

1. Every owner is emailed.
2. The organization closes for everyone except its owners, who can still read, export and cancel. Its API keys are refused, so its agents stop.
3. Any owner can cancel, reopening it as it was.
4. After 30 days it is purged — boards, history, agents, keys, members, its audit trail. A record that it existed, who deleted it and when, is kept outside it.

Leave instead

To stop being part of an organization without deleting it, leave it — unless you are its last owner, in which case make another owner first.