Delete company SERVER-SIDE

This page provides additional information on what a request to delete a company entails.

Overview

Basically, a success response signals that the provided id and the used api key have been persisted to a log table and a command has been sent to backend systems to trigger the deletion process. Doing a delete request will have both immediate and delayed effects and most of these cannot be undone.

Immediate effects

NB! Requesting clients will lose all access to the customer company data after a delete request has been made. No new client tokens can be created after the request has been persisted. Any and all existing client tokens will be revoked within a few milliseconds. However, it might take a few seconds before caches in api controllers reflect the deleted status of the client tokens.

Obviously, without client tokens there is no way to send nor receive documents. Currently, there are no checks to prevent trigger of the deletion process on a customer company which still has documents in flight. It is completely up to the requesting clients to ensure it is safe to delete their customer company. Failure to do so will generate exceptions in the deletion process and then generate unnecessary manual work for both our and your support staff.

Delayed effects

The primary goal of the deletion process is to ensure that no personally identifiable information (PII) will remain in the api about your customer company. However, some information about the legal entity represented by your deleted customer company might still be retained in some form in InExchange Network. Although you might have lost the reason to keep the customer company registered, this does not automatically mean that the legal entity has completely disappeared from InExchange Network. Increasingly, customers use multiple service providers to send and receive various document types and as long as InExchange Network is at least partially involved, we must retain some data about the company. However, the PII for your customer company registration will be deleted from our api.

The persisted delete request will continue to block any new attempts to register that particular customer company identifier with the same api key. It will continue to block even after all meaningful data have been erased. Currently manual intervention is required to finally mark the deletion request as handled but once that happens it will be possible to (re)start registration of your customer company just as if it never was registered in the first place.