Data Retention Policy

Draft Data Retention Policy. Default platform retention windows are configurable per centre via retention_policies and must reflect medical, contractual, and legal requirements.

Erasure requests are not unrestricted deletes where retention obligations apply. Deletion and anonymization actions must be audited.