---
title: "Confirm deletion when a vendor leaves · Agent Wranglers"
url: https://agentwranglers.se/playbook/compliance/processors-and-transfers/vendor-exit
updated: 2026-10-20
licence: "All rights reserved"
---

# Confirm deletion when a vendor leaves

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Recommended
- Chapter: [Processors and transfers](https://agentwranglers.se/playbook/compliance/processors-and-transfers)
- Rule: When you stop using a vendor, get written confirmation that it deleted or returned your data, before you remove it from the register.
- How: Article 28(3)(g) makes deletion or return part of every processor contract. Revoke its keys and accounts on the last day. Ask for a deletion confirmation with a date. Keep the closed entry with that date for as long as your audit evidence is kept.
- Check: A script fails on any vendor ended over 30 days ago without a `deletion_confirmed` date. It also fails when its API key is still active.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers compliance playbook: https://agentwranglers.se/playbook/compliance/processors-and-transfers/vendor-exit`.

- Previous: [Record the data terms of every AI provider](https://agentwranglers.se/playbook/compliance/processors-and-transfers/ai-provider-terms)
- [Processors and transfers](https://agentwranglers.se/playbook/compliance/processors-and-transfers)