CaseWare maintains a records and retention policy for Cloud services. The retention policy is not client specific. Backup and recovery procedures are documented and daily alerts are sent to operations staff through automated alerts. Backup and recovery measures have been incorporated as part of business continuity planning and tested accordingly for effectiveness. Record Category Description Retention Period Reason for Retention Allowable Storage Media System Transaction Logs Database journals and other logs used for database recovery 30 days Based on backup and recovery strategy Electronic Audit Logs Security logs e.g. records of logon/logoff and permission changes 30 days Maximum period of delay before forensic investigation Electronic Operational Procedures Records associated with the completion of operational procedures 2 years Maximum period of time elapsed regarding dispute Electronic Customer Customer backups 90 days Data protection requirement Electronic