What GTR processes, why, and how long it is kept.
Draft for legal review. This text is not yet in force.
Registry records hold the GTRN, the language pair, the document’s SHA-256 fingerprint, timestamps and lifecycle events. Accounts hold an email address and session data. Abuse protection uses a keyed hash of the client address, never the raw address.
Verification works from a fingerprint that you compute. GTR does not need your document to verify a record, and zero-retention processing does not store file content or write it to logs.
Online verification of a record lasts at most 730 days per term. After expiry the verification data is removed and only a minimal tombstone remains, which cannot be used to match a document.
A document subject can submit a rights or privacy request without an account, even when someone else registered the record. Authorized staff review the request. A privacy action does not by itself cancel the document.
Customer documents are not used as AI training data by default. AI features are advisory and never decide whether a record is verified.