Data Retention Policy Generator
Draft an internal data retention policy with your own schedule, a responsible person, deletion methods and legal holds.
Runs in your browser. Your input is processed on your device and is not uploaded to our server.
Only what you enter is stated as fact. Anything left blank stays out of the draft, or appears as a marked gap for you to fill in.
Lines starting with # are headings, “- ” are bullets and “> ” is the draft notice. Delete the notice only once the document has been reviewed.
You have edited this draft, so changes to the form no longer update it.
How to use the Data Retention Policy Generator
- Answer the questions. You only see those that matter for this document, and answers carry over to the other generators.
- Read the draft as it updates, fill in the gaps marked in yellow, and edit the text if you need to.
- Copy it, print it, or download it as TXT, HTML or PDF, and have it reviewed before you use it.
How long should you keep data?
A retention policy is usually an internal document. It records how long each kind of record is kept and how it is deleted. Data protection laws generally expect personal data not to be kept for longer than needed, while tax and employment laws can require minimum periods.
The tool does not suggest periods, because the right ones depend on your country and your records. Enter your own schedule and have it checked.
How this draft is made
Only what you tell the tool is stated as fact, and anything you leave blank appears as a marked gap or is left out. Your answers stay in your browser and are not sent to our server.
This is a draft, not legal advice. Review it against the laws that apply to you and what you actually do, ideally with a qualified lawyer.