Offboarding & Account Exit

Veilio provides a guided offboarding flow so customers can recover all plaintext data and leave without vendor lock-in. Dashboard: Settings → Compliance → « Leave Veilio » (/dashboard/offboarding).

Why a guided flow?

Account deletion is irreversible. The flow ensures you:

1. Understand the consequences.
2. Export all detokenized data.
3. Archive audit logs.
4. Confirm reintegration into your own systems.
5. Only then delete the account.

Steps (4 required before deletion)

Step	Requirement	Validation
1. Understand	Checkbox acknowledgement	Client-side
2. Export data	Full GDPR export (JSON or CSV)	Server: hasCompletedExport + 2FA
3. Export audit logs	Download JSON or CSV logs	Client: logsDownloaded after download
4. Confirm recovery	Three checkboxes (downloaded / verified / reintegrated)	Client-side
5. Delete account	Password confirmation	DELETE /api/compliance/delete-account

Progress is shown as X/4 required steps. Deletion stays locked until all four are complete.

Export data (step 2)

POST /api/compliance/export
Content-Type: application/json

{
  "format": "json",
  "code": "123456"
}

• Requires authenticated session + TOTP 2FA code.
• Job runs asynchronously; email notification when ready.
• Export detokenizes all your tokens — quota checks are bypassed for this operation.
• Download via the one-time link from the offboarding UI or compliance settings.

Export audit logs (step 3)

GET /api/compliance/logs-export?startDate=YYYY-MM-DD&endDate=YYYY-MM-DD&format=json

Choose a date range (default: last 30 days). Mandatory before account deletion.

Inventory preview

Before exporting, the UI loads:

GET /api/compliance/offboarding/summary

Returns active token count, datasets, API keys, shredded token count, and export status.

Crypto-shredded data

Tokens that were crypto-shredded are permanently unrecoverable and will not appear in the export. The UI warns if shredded tokens exist.

After deletion

All tokens, logs, API keys, datasets, and the subscription are removed. The user is logged out.