VaseSignby Stars in a Vase Digital Trust
FeaturesIndustriesAI reviewEvidenceFeature ShopPartnersTrust CenterConnect
✦ Sign For Free. Forever.
Sign inStart signing

Trust Center

Data retention

Retention objectives, legal holds, deletion pathways, and customer responsibilities — configuration-dependent and governed by your agreements.

  • Overview
  • Legal alignment
  • Signature levels
  • Evidence pack
  • Security
  • Privacy & POPIA
  • Subprocessors
  • Data residency
  • Data retention
  • Incident response
  • Availability
  • Enterprise assurance
  • Vulnerability disclosure
  • Contact
VaseSignby Stars in a Vase Digital Trust

VaseSign by Stars in a Vase Digital Trust helps teams prepare, review, send, sign, verify and evidence important documents with ECTA-aware workflows, POPIA-aligned controls where configured, and optional higher-assurance paths through configured providers.

Product

  • Features
  • AI document review
  • Evidence-backed signing
  • Feature Shop
  • Partner Network
  • Marketplace
  • Developers
  • Trust Center

Industries

  • Legal & conveyancing
  • Property & rentals
  • HR & onboarding
  • Banking & insurance
  • Government & SMEs

Company

  • About & trust
  • Contact
  • OEM partners
  • White label
  • Partner portal
  • Careers

Legal

  • Trust Center
  • Privacy Policy
  • Terms of Service
  • POPIA (Trust)
  • ECTA alignment

2026 Stars in a Vase Digital Trust. All rights reserved. | ✦ Sign For Free. Forever.

Built in South Africa|ECTA-aware · POPIA-aligned where configured

Retention is influenced by product configuration, legal requirements for specific industries, litigation holds, and the lifecycle of integrated subprocessors. VaseSign provides controls your organisation can align to policy — VaseSign does not substitute for your records-management programme.

Customer-configurable retention

Workspace administrators define how long completed envelopes and artefacts remain online subject to plan limits. Exports for archival storage remain customer-managed once downloaded — custody after export follows your internal controls.

Legal and regulatory holds

When instructed by lawful authority or internal governance, organisations may suspend deletion for affected records. Mechanics vary by deployment — enterprise agreements describe how hold notices are applied and released with audit trails where supported.

Operational backups

Backup copies exist for resilience and may persist briefly beyond interactive deletion until overwritten according to rotation schedules. Restoration from backup is exceptional and logged; customers requiring stricter erasure windows negotiate bespoke schedules where feasible.

Deletion pathways

End-user deletion triggers propagate according to application logic; residual artefacts in caches or derived indexes clear within documented eventual-consistency windows. Third-party subprocessors honour deletion instructions through contractual clauses reviewed during onboarding — reference the Subprocessors register.

Coordinate residency discussions alongside retention using Data residency.