What do I need to use Data Retention Policy?

Data categories; Legal / regulatory drivers; Business need; Where it lives.

Is Data Retention Policy free to use?

Yes — run it free in the browser playground (no API key needed for the sponsored trial, or bring any provider key), or install it into Claude Code, Cursor, ChatGPT and more via npx pm-claude-skills. MIT-licensed and open source.

Data Retention Policy

Q: How do I know the Data Retention Policy output is good?

The skill verifies itself against its own quality checks: Every category has both a retention period and a documented basis; Periods default to the shortest that satisfies the legal/business need (minimisation), not "indefinite"; Backups and logs are covered, not just the primary store; Each category has a concrete deletion trigger and method, not just a duration.

🔵 Stable🕐 updated 2026-06-24 🔷 SkillSpec L3 ⚙ ships an executable helper pm-compliance

Build a data retention and deletion schedule grounded in legal basis. Use when asked to create a data retention policy, set retention periods, plan data deletion/minimisation, or answer 'how long can we keep this data?'. Produces a retention schedule — data categories with their retention period, legal/business basis, deletion trigger and method, plus flags for data kept with no basis or no defined period.

▶ Run it free — no key needed 📝 Grade your existing draft View SKILL.md ↗

What to give it

▸Data categories — the kinds of data you hold (customer records, logs, financial, HR, marketing, backups).

▸Legal / regulatory drivers — anything mandating minimum retention (tax/financial records, employment law) or maximum (GDPR minimisation, sector rules).

▸Business need — why each category is genuinely needed and for how long.

▸Where it lives — systems and backups (backups are the most-forgotten place data outlives its policy).

✅ The bar it holds itself to

Every skill in this library self-verifies — these are this skill's own quality checks, straight from its definition.

✓Every category has both a retention period and a documented basis

✓Periods default to the shortest that satisfies the legal/business need (minimisation), not "indefinite"

✓Backups and logs are covered, not just the primary store

✓Each category has a concrete deletion trigger and method, not just a duration

✓Statutory minimums (tax, employment) and maximums (minimisation) are both respected

⚠️ What it refuses to do

Do not set retention to "indefinite" or leave it blank — undefined retention is the highest-risk, least-defensible state

Do not forget backups — data deleted from production that lives on in backups is still data you hold

Do not keep data with no legal or business basis — if you can't justify it, deleting it lowers risk for free

Do not set a blanket period for all data — tax records and marketing emails have very different drivers

Do not present statutory periods as advice — flag where legal/compliance must confirm the minimums

Install

npx pm-claude-skills add --agent claude   # or codex · cursor · gemini · hermes
# or one-line MCP (every skill, any client):
claude mcp add pm-skills -- npx -y pm-claude-skills-mcp

Related skills

🔌 Embed this skill

Drop this on your blog, docs, or site — it renders a "Run this skill" card:

<div data-pm-skill="data-retention-policy"></div>
<script src="https://mohitagw15856.github.io/pm-claude-skills/embed.js" async></script>

💬 Discussion

Data Retention Policy is one of 750 open-source professional AI agent skills — all SkillSpec L3. Try them all in the browser · ⭐ Star on GitHub · Browse the full catalog