Right to be Forgotten

Has one of your customers asked to be forgotten? You may be legally obligated to remove this information from all of your systems, including GRAX backups. This is a common scenario that we hear from customers, and we have the tools to put this power in your hands. Deleting records from your GRAX data stores can be accomplished from within the GRAX user interface.

Do Not Modify Data Directly

The GRAX data storage layer is a proprietary, compressed, bit-level data store that isn't human readable or editable. Never modify the dataset in storage yourself, including the deletion, modification, renaming, or moving of storage objects. All interaction with the stored data should occur via the GRAX app.

Deleting a Record from GRAX

The option to permanently erase data from your GRAX backups is available on the GRAX record details page for all users with Administrator level permissions within GRAX. For more information about GRAX permissions management, see our documentation.

For the deletion option to appear, the record must be deleted or archived from Salesforce (only exists in GRAX storage).

To permanently and irreversibly delete a record from GRAX:

  1. Open the record you would like to delete, either via Search or direct link.
  2. Click "Delete Forever (GDPR)"
  3. Click "Proceed"


GRAX is the final storage location for this data. Once deleted, it's unrecoverable. You can never restore, preview, or search for this data again.

Screen Shot 2022-04-15 at 2.53.09 PM.png

Screen Shot 2022-04-15 at 2.53.19 PM.png

Deletion Delays

Deletion of data from the GRAX dataset may take a few minutes to complete, as the operation is asynchronous. Please be patient before confirming the deletion. This is not a mechanism by which canceling a deletion is possible. Once you've confirmed the deletion, the data is destroyed.

Impact on History Stream

GRAX History Stream is a feature wherein your GRAX data is extracted from the proprietary data layer and written into parallel Parquet files. Permanent deletion of records as described above doesn't extend to already-written Parquet files. Data emitted to History Stream remains as written permanently unless manually modified by your administrators. Once a record is deleted, it is never written to future Parquet files (that is if History Stream is newly enabled, reset, etc.).

If you are exporting the History Stream results to another system, such as Redshift, Postgres, Tableau, etc., it's your responsibility to track down a compliant data deletion process for those systems.