Skip to main content
AppAlert

Retention, access revocation, and deletion

Revoking Microsoft consent stops future inventory reads. Deleting AppAlert data is separate, so admins can keep the queue and notification record.

Reviewed

On this page

Retention periods

Notification history
Customer reads and scheduled cleanup enforce a 365-day retention window.
Organization Settings history
Settings change records use the same 365-day retention window.
Product inventory
Application, credential, ownership, and configuration records remain while the organization uses AppAlert or until deletion is requested.
Email provider records
Resend states that email and log data is retained for 30 days on its standard plans and backups persist for 7 days.

Revoke Microsoft access

A Microsoft Entra administrator can revoke AppAlert's enterprise application consent. AppAlert also detects authorization failures and marks consent as revoked. It does not continue syncing after the read permissions are unavailable.

Delete AppAlert data

Organization deletion is handled manually during Early Access. The deletion operation removes the linked organization, its synchronized inventory, settings, notification records, and non-platform user accounts from the application database. Provider backups expire under each provider's retention policy.

Primary sources