Data Retention and Protection

We take data privacy very seriously and hence have rigorous data protection processes in place:

Screening API

We prioritize the security and privacy of your data. After processing each API request, we immediately hash all transmitted data, storing only these hashed values on our servers. This process ensures that no clear data is stored on our systems.

Manual Single Screening via the Screening Portal

When you perform a manual Single Screening in the Screening Portal, your search results are temporarily retained for 1 hour. During this window, you can generate and download a PDF Screening Report or JSON file of your results. After 1 hour, the search data is automatically removed from our servers.

If you need a PDF report, we recommend generating it promptly after completing your search.

Batch Screening

For Batch Screening, we adopt a minimal retention principle. Data and corresponding results are encrypted both in transit and at rest, and retained on our servers for up to 30 days after processing. After this period, results are automatically removed from our servers and can no longer be accessed. You may also manually delete a batch at any time, which permanently removes all associated data and invalidates any shared links.

We recommend downloading and archiving your reports promptly for long-term record-keeping.

Ongoing Monitoring

All customer data and monitoring results are securely encrypted and stored under strict access controls.

Monitoring data is retained for as long as the entity remains active in your monitoring list. Historical alerts are preserved even after entities are cleared, providing a complete audit trail.

When records are deleted from the Monitoring Portal or via the API, they are not immediately purged from our database. This retention ensures data integrity, maintains a complete audit trail, and supports regulatory compliance requirements. Permanent deletion occurs only when the customer formally requests it from sanctions.io, or the subscription plan ends or is canceled. Once permanently deleted, the record and its associated history cannot be recovered.

To request permanent deletion of monitoring records, please contact our support team at help@sanctions.io.