Compliance Documentation
SOC 2 Alignment for AI Agents and Chatbots for Municipalities
CityDesk supports SOC 2 controls related to retention and disposal, focusing on C1.2 (Confidential Information Disposal) and P5.1 (Data Retention). It outlines configurable retention with automated enforcement, deletion logging via a retention audit trail, and legal holds, along with the evidence a municipality can request during a vendor assessment.
SOC 2 Alignment for CityDesk
CityDesk supports controls commonly reviewed in SOC 2 vendor assessments,
especially around data retention and disposal. This document focuses on C1.2
(Confidential Information Disposal) and P5.1 (Data Retention).
C1.2: Confidential Information Disposal
CityDesk provides:
Configurable retention policies for conversations, files, and audit logs
Automated retention enforcement to dispose of records on schedule
A retention audit trail that documents each deletion
Legal holds that pause deletion when preservation is required
Evidence you can request:
Retention policy settings
Retention job history and deletion reports
Legal hold activity records
P5.1: Data Retention
CityDesk provides:
Retention periods aligned to your privacy and records requirements
Different retention schedules by department or project
A documented record of retention actions and exceptions
Evidence you can request:
Retention policy summary by department or project
Retention audit trail exports
Audit log samples for compliance review