Customer Data Offloading Policy

When you stop using MetaDefender Cloud

This page explains what happens to your organisation's data when your contract ends: how to close your account, what you can take with you, what OPSWAT deletes, what OPSWAT keeps and why, and when deletion is complete.


How to close your account. Contact OPSWAT Support through the Data Subject Request form My OPSWAT Portal - One-stop Hub for Customers and Partners

To complete the form, please provide the following details:

  1. Country: Enter your country of residence.

  2. Relationship with OPSWAT: Specify your relationship with OPSWAT. This could be as a Job Candidate, Intern, Current or Former Employee, Current or Former Contractor, Customer, Supplier, or Channel Partner. If your relationship does not fall into these categories, select ‘Other’ and provide further details

Next, select the type of request you wish to make:



  • Delete My Data: Request the deletion of your personal data.

  • Restrict the Use of My Data: Request OPSWAT to cease processing your personal data under certain conditions.

  • Access My Data: Request access to the personal data that OPSWAT holds about you. This includes access to copies of the retained personal data or having such information transferred to another party.

  • Correct My Data: Request corrections to your personal data held by OPSWAT.

  • Other: For any other actions, please specify in the ‘further details’ box.

After submitting the form through the request portal, an email will be sent to the address you provided. This email should arrive within 30 days. If you do not respond to the verification email within 5 days, the Data Subject Request form will expire. If you respond, a Jira ticket will be created for our team to handle your request. Once your request has been fulfilled, you will receive a notification.

What you can take with you. Before your account is closed you can export your scan history, your scan results and your sanitized files from the last 24 hours, in JSON format, through the API. Export is available until your request to delete your account is processed. After that, the data is deleted and cannot be recovered.

What OPSWAT deletes. Once your account is closed based on the request you made, OPSWAT deletes: your scan results, scan history, the files you uploaded, the hashes of the files you scanned privately, and your organization and user records. Deletion covers both the live service and OPSWAT's backups, with backups being removed 8 days after end of usage.

What OPSWAT keeps and why. OPSWAT is applying a maximum retention of 10 years to all stores that hold your files and scan records. Until that is complete, files and results may be kept longer; the stores that do not yet expire are listed in our exclusions.

When deletion is complete. Your data is removed from the live service and from OPSWAT's backups in accordance with applicable laws, within the period that applies to your country or state. You will receive a notification from the support team once your data was removed.