Trust
Who owns the data and how long is it kept?
The data belongs to the institution; retention and destruction periods are set from its own admin screen.
Detail
The institution can choose the cloud or its own local network; in both cases it is the data controller and we are the processor.
When the period expires the record is destroyed; deactivation does not count as destruction.
Source
Source: the product's retention and erasure setting.