Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Following termination or expiration of the Agreement, Baseten provides a twenty-day window during which Customer may retrieve Customer Content through the platform; after this window, Baseten discontinues all use of and destroys all copies of Customer Content unless Customer has instructed earlier deletion.
This analysis describes what Baseten's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a fixed twenty-day data retrieval window post-termination, after which Customer Content is destroyed, requiring Customer organizations to operationalize data extraction before the deadline to avoid permanent data loss.
Under this clause, Customer has twenty days from the end of the Agreement Term to retrieve Customer Content through the platform; after this period, Baseten will destroy all copies of Customer Content, and no further retrieval will be available.
Cross-platform context
See how other platforms handle Customer Data Return and Deletion Timeline and similar clauses.
Compare across platforms →Monitoring
Baseten has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"For twenty (20) days after the end of the Term, as applicable, Baseten will make Customer Content available to Customer through the Baseten Products & Services on a limited basis solely for purposes of Customer retrieving Customer Content, unless Baseten is instructed by Customer to delete such data before that period expires. After such period, Baseten will discontinue all use of Customer Content and destroy all copies of Customer Content in its possession.Excerpt from Baseten's Terms of Service
(1) REGULATORY LANDSCAPE: This provision engages DPA Section 9 obligations and GDPR Article 28(3)(g) requirements for processors to delete or return personal data upon termination of processing services. The twenty-day retrieval window in the main terms and the fourteen-day written request window in DPA Section 9 create parallel but distinct timelines that compliance teams should map against each other and against applicable regulatory retention and deletion requirements. (2) GOVERNANCE EXPOSURE: Medium. The twenty-day retrieval window is a hard operational deadline. Organizations with large volumes of Customer Content stored on the Baseten platform must have data extraction workflows in place prior to or immediately upon termination to ensure retrieval within the window. The DPA's Post-cessation Storage Period of fourteen days for personal data return requests is shorter than the main terms' twenty-day window, creating a potential compliance gap if personal data requests are not submitted promptly. (3) JURISDICTION FLAGS: GDPR and UK GDPR require processors to delete or return personal data upon instruction from the controller at the end of services. The DPA's mechanism at Section 9 governs personal data specifically and should be evaluated alongside the main terms' twenty-day window to ensure GDPR Article 28 compliance. California customers should evaluate CPRA deletion obligations. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers should establish data extraction procedures that can be activated immediately upon notice of termination or non-renewal. The agreement does not describe technical mechanisms or file formats for data extraction, which may affect operational feasibility within the twenty-day window depending on data volume. (5) COMPLIANCE CONSIDERATIONS: Data protection officers should confirm that the DPA Section 9 personal data return and deletion mechanism and the main terms' twenty-day Customer Content retrieval window are both incorporated into offboarding procedures, and that written personal data return requests are submitted within fourteen days of the service cessation date where required.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a fixed twenty-day data retrieval window post-termination, after which Customer Content is destroyed, requiring Customer organizations to operationalize data extraction before the deadline to avoid permanent data loss.
Under this clause, Customer has twenty days from the end of the Agreement Term to retrieve Customer Content through the platform; after this period, Baseten will destroy all copies of Customer Content, and no further retrieval will be available.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Baseten.