Data protection: DPA and data export

Data protection: DPA and data export

Accupe gives you tools to review how your data is processed, and to take a full copy of your firm's records, in line with data protection law in your region. You'll find all of this in Settings > Security, which is only accessible to admins.

Which heading you'll see

The data protection card's title depends on your firm's region:

Data retention policy

Under the heading, an information panel explains Accupe's retention policy: client data is kept for 7 years from the end of an engagement, in line with industry regulatory guidance. Inactive client records are automatically flagged for review once that period passes, and all data is encrypted both at rest and in transit. This is fixed policy information, not a setting you can change from this screen.

Viewing your Data Processing Agreement (DPA)

1. In the card, select "View DPA Document".
2. The "Data Processing Agreement" window opens, headed "STANDARD CONTRACTUAL CLAUSES", with five numbered sections: Scope and Applicability (citing UK GDPR or UAE Federal Decree-Law No. 45 of 2021, depending on your region), Processing of Personal Data, Security Measures (which states AES-256 encryption at rest and TLS 1.3 in transit), Sub-processors, and Data Subject Rights.
3. Select "Agree & Close" once you've reviewed it.

Note: The "Download PDF" button in this window shows a confirmation message but does not currently generate or download an actual file. If you need to keep a record of the DPA text, copy it from the window before closing, rather than relying on the download button.

Exporting your firm's data

Use this to get a complete copy of your firm's data, for your own records or to satisfy a data portability request.

1. In the card, select "Export All Data (JSON)".
2. Review what's included: firm profile and branding; all clients, jobs, tasks, and timesheets; messages, file metadata, and signatures; AML screenings and KYC sessions; compliance and system audit logs; and AI chat history. Sensitive credentials such as passwords, OTPs, and tokens are always excluded.
3. Select "Start Export". This can take up to a minute for larger firms; while it runs, the button shows "Preparing…" and is disabled.
4. Once it finishes, select "Download archive" to open the file in a new tab.
5. Select "Close" when you're done.

The download link stays valid for 24 hours from generation. After that, run the export again to get a fresh link.

Tip: Despite the on-screen description mentioning a "JSON/CSV archive", the export is currently a single JSON file only. If you need the data in spreadsheet or CSV form, you'll need to convert the file yourself, or have your IT team do it.

Requesting deletion of your firm's data

The same card has a "Request Data Deletion" button for permanently erasing your firm's data instead of exporting it. This is a separate, irreversible action; see "Deleting your Accupe account" for the full process.

Your rights, by region

Note: Exporting your data is non-destructive: you can run it as many times as you like without affecting anything already in Accupe. Deletion is the opposite, permanent and irreversible, so export a copy first if there's any chance you'll want the data later.