Message retention and records you can rely on
TL;DR
Pantheon is built not to lose records. Deleting a message hides it rather than erasing it, an edit keeps the earlier wording alongside the new one, and shared files are kept. Records are held for seven years by default. Custom retention periods, legal hold and tamper-proof storage are built for your deployment on request.
On this page
A delete hides; it does not erase
When a message is deleted, Pantheon marks it deleted and shows that in the conversation. The record itself is kept. The same holds for contacts, notes and files: they are soft-deleted and hidden, not destroyed.
That matters for two reasons. A firm that must keep business records cannot have them vanish because someone tidied a chat. And a mistaken delete can be undone, because nothing was thrown away.
Recorded meetings are the one exception. When you delete a recorded meeting, its audio, transcript, speaker labels and summaries are erased, backups included, within 30 days, as our privacy policy says.
An edit keeps what was said before
When a message is edited after Pantheon has captured it, the earlier wording is saved before the new wording replaces it. The record shows what the conversation says now, with the history behind it kept.
How long records are kept
The default hold is seven years, and it covers system and audit logs as well as conversations. When an organization leaves Pantheon, or a person deletes their account, their data is removed: an account is removed within 30 days. Shorter periods are deliberate and disclosed, such as a temporary AI chat, which a person opens on purpose and which is kept for a shorter time.
If your rules need a different period, a hold on specific people or matters, or storage that cannot be altered, those are built into your deployment on request.
What is standard and what is on request
Standard means it is part of every Pantheon Enterprise deployment today. On request means we build it for your deployment once you ask, and support it from then on.
| Capability | Availability | What it means |
|---|---|---|
| Soft delete for messages, contacts, notes and files | Standard | Deleted items are hidden, not erased. |
| Deleted meeting recordings erased | Standard | Audio, transcript and summaries, backups included, within 30 days. |
| Earlier wording kept on edits | Standard | Saved before the new wording replaces it. |
| Shared files kept | Standard | Kept with the conversation they came from. |
| Seven-year default hold | Standard | Covers conversations, system logs and audit logs. |
| Custom retention periods | On request | Set to your rules, per deployment. |
| Legal hold on people or matters | On request | Records under hold are kept regardless of other rules. |
| Tamper-proof (write-once) storage | On request | For records that must not be altered after they are written. |
If someone deletes a message, is it gone?
No. Pantheon marks it deleted and hides it in the conversation, but keeps the record under your retention rules.
What happens when someone deletes a recorded meeting?
It is erased. Its audio, transcript, speaker labels and summaries are removed, backups included, within 30 days.
How long does Pantheon keep data?
Seven years by default. A deleted account is removed within 30 days. Different periods and legal hold are on request for your deployment.
Is Pantheon storage write-once (WORM)?
Not as standard. Tamper-proof storage is built on request; until then, Pantheon can feed the write-once archive your firm already runs. See messaging capture for regulated teams.