Compliance Documentation
SOC 2 Alignment for AI Agents and Chatbots for Government
Civagent supports controls commonly examined in SOC 2 vendor assessments, particularly those concerning data retention and disposal. This note concentrates on C1.2 (Confidential Information Disposal) and P5.1 (Data Retention).
C1.2: Confidential Information Disposal
Civagent provides:
- Configurable retention policies for conversations, files, and audit logs
- Automated enforcement to dispose of records on schedule
- A retention audit trail that documents each deletion
- Legal holds that pause deletion when preservation is required
Evidence you can request:
- Retention policy settings
- Retention job history and deletion reports
- Legal hold activity records
P5.1: Data Retention
Civagent provides:
- Retention periods aligned to organisational privacy and records requirements
- Distinct retention schedules by department, programme, or project
- A documented record of retention actions and exceptions
Evidence you can request:
- Retention policy summary by department, programme, or project
- Retention audit trail exports
- Audit log samples for compliance review