Due Dili Due Dili Logo

Data Retention Policies

DueDili provides configurable retention periods for deal conversations, audit logs, and data room documents. Policies can be set at the organization level with deal-specific overrides, allowing you to align data lifecycle management with your confidentiality agreements and regulatory requirements.

Why Retention Policies Matter in M&A

M&A teams must balance competing requirements:

  • Retain records long enough to support post-closing adjustments, indemnification claims, and regulatory inquiries (typically through the survival period of representations and warranties)
  • Minimize data exposure by not retaining target company confidential information longer than necessary, honoring NDA obligations

What Can Be Configured

DueDili allows independent retention periods for different data types:

  • Deal conversations — AI-assisted discussions about targets, financials, and deal terms
  • Audit logs — Records of who accessed what deal information and when
  • Data room documents — Uploaded financials, contracts, and due diligence materials

Each data type can have its own retention period, and deals can override organization defaults when transaction agreements specify different requirements.

Typical M&A Retention Periods

Data Type Typical Requirement
Deal conversations Through survival period (typically 12-24 months post-close)
Audit logs 3-7 years (varies by jurisdiction and deal type)
Data room documents Per NDA terms or survival period

Note: Always consult your legal counsel to determine appropriate retention periods based on your transaction agreements, NDA obligations, and applicable regulations.

How Retention Works

  • Retention cleanup runs automatically on a scheduled basis
  • Data older than the configured retention period is eligible for deletion
  • Audit logs are archived before deletion to preserve integrity verification
  • All deletions are permanently documented for compliance reporting

Legal Hold Override

Data subject to a legal hold is never deleted by retention policies, regardless of age. This ensures compliance with preservation requirements during post-closing disputes, regulatory investigations, or litigation.

Related