Governance

Tenant lifecycle

Tenant lifecycle workflows help owners request organization exports and deletion processing without bypassing audit and operational safeguards.

Audience: Owners, admins, security reviewers, customer success teams

Lifecycle requests

  • Organization owners can request export or deletion from the Policies page.
  • Requests are audit logged with requester, reason, type, status, and timestamps.
  • Export requests are processed by the worker and produce downloadable JSON artifacts.
  • Deletion requests wait for the configured grace window before execution.
  • Completed deletion writes a tombstone record before removing the organization.

Export behavior

  • Exports include organization records, access records, monitors, services, incidents, reports, integrations, deployment events, audit records, and bounded telemetry samples.
  • Sensitive integration secrets are redacted in export artifacts.
  • Export artifacts expire after the configured export retention period.
  • Owners can download completed exports from the Policies page.

Operational safeguards

  • Deletion is not immediate; use the grace window to handle mistakes, legal review, or customer communication.
  • Deletion tombstones preserve minimal accountability evidence after the organization is removed.
  • Failed lifecycle jobs keep an error message visible on the Policies page.
  • Cancelled requests remain visible as part of the lifecycle history.

Related documentation