Trial users now self-select 30, 90, 180, or 365-day anonymisation windows on Scorafy. The evaluation scores survive the redaction; the raw personal answers do not.
One Supabase migration, one row in the dashboard, no new dependencies. The policy engine runs on Postgres pg_cron, ticks against now(), and routes records through an anonymisation pass that nulls the PII columns but preserves the rubric output.
The harder problem was rubric stability across the redaction boundary - if scores are calibrated against the original text, dropping the text should not invalidate them. The fix is that rubric scoring happens at submission time and the score record is the artefact retained. Retention windows operate on the source data, not the derived signal.
A paying trial customer requested this directly. Shipped same day, no downtime.