What is EasyPost’s data retention policy?
How long is data retained?
What kind of internal controls does EasyPost have for accessing servers or customer data?
What is EasyPost’s data retention policy?
EasyPost's engineering team is dedicated to providing our users with the most secure and efficient platform to optimize shipping. You can find our data retention policy on our privacy page.
We've made a conscious effort to create a strategy that has minimal impact and will give our users ample time to access the data they need. If you have concerns about how you will be affected please reach out to privacy@easypost.com as soon as possible.
How long is data retained?
EasyPost currently reserves the right to retain all data indefinitely. We currently guarantee that we will retain your objects for at least the following periods:
- Purchased Shipment Objects: 3 years
- Un-purchased Shipment Objects: 6 months
- Postage Label Objects: 3 years
- Purchased Rates: 3 years
- Trackers and Status Details: 2 years
- Postage Label Images: 180 days
- Un-purchased Rates: 7 days
- Events and Event Payloads: 2 weeks
- Test Mode Objects: 30 days
- Forms Labels: 5 years
- Claim Attachments: 6 months
These durations are subject to change; changes will be communicated via the EasyPost blog.
What kind of internal controls does EasyPost have for accessing servers or customer data?
Customer data can be accessed by employees for legitimate business purposes through several custom-developed and open-source tools. All such tools are accessed either through SSH or TLS-protected HTTPS connections.
All administrative HTTPS connections are authenticated through a delegated SSO system and are limited to TLS 1.2 with PFS cipher suites. SSH is restricted to public key authentication.