On-Premise reversibility: your data never leaves
The appliance runs on your hypervisor and the data sits on your disk. Leaving Natalia means exporting what you need, then deleting the VM when you decide.
What stays with you
| Data | CDR, configuration and audit log live on the appliance data disk, on your infrastructure. |
|---|---|
| Access | Natalia cannot delete your data remotely. In Strict mode, Natalia has no access to the appliance at all. |
| End of license | The dashboard locks, the data stays on the disk. Collection keeps running. License states |
| Retention | By default, CDR are kept 5 years and the audit log 3 years, then purged automatically. |
Leaving the solution
Step 1/3
Export
Before the license expires, export your CDR in CSV or JSONL with their JSON Schema. Open formats, readable without Natalia. See exports.
Step 2/3
Keep or archive
Keep the data disk or a hypervisor snapshot for as long as your own retention obligations require.
Step 3/3
Delete
Delete the VM and its disks from your hypervisor, following your media destruction procedure. Natalia keeps no copy.
Erasure of an employee's data (GDPR art. 17)
Without leaving the solution, an administrator can erase the data linked to an extension. The erasure cascades over all the related data and returns a signed certificate, verifiable offline, to hand to the employee or to the supervisory authority.