SaaS Tenant Data Portability & Erasure

What it does

This skill provides a high-fidelity engineering framework for implementing "Right to Portability" and "Right to be Forgotten" workflows in multi-tenant SaaS environments. It ensures that data deletion cascades through all storage layers, including primary DBs, warehouses, backups, and third-party processors, while maintaining necessary legal retention.

When to use it

Use this skill when designing compliance-driven data deletion systems for GDPR (EU), POPIA (South Africa), CCPA (California), or DPPA (Uganda). It is essential for architects needing to move beyond "soft deletes" to true regulatory erasure.

What's included

• Instructions: A 9-step workflow covering data inventory, erasure capability matrices, requester verification, and retention exception documentation.
• References: Guidance on erasure cascades, export format specifications (JSON-LD/CSV), and verification strength levels.
• AI Specifics: An addendum for purging AI-specific data including vector namespaces, embeddings, and fine-tuning adapters.
• Compliance Matrix: Detailed mapping of erasure mechanics across OLTP, Search, Object Storage, and CRM systems.

Compatible agents

Compatible with Codex and Claude Code agents focusing on SaaS engineering, security audit, and compliance architecture.