What is data portability?
Data portability is a customer's ability to get their data out of a service in a usable format, so they can move to another provider. GDPR Article 20 gives individuals a version of this right. In vendor contracts it is part of exit planning, along with deletion after termination.
What the buyer is really asking
The buyer is planning for the day they leave. Explain how they can export their data (formats, API, self-serve or on request), how long you keep it after termination, and how deletion is confirmed.
Other ways buyers ask it
Every one of these wants the same answer:
- “Can customers export their data programmatically?”
- “What happens to our data when the contract ends?”
- “In what formats can data be exported?”
- “Do you provide a certificate of deletion on termination?”
Evidence to have ready
- Export documentation or API reference
- The termination and data return clause in your terms
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.
Related cloud and infrastructure questions
- Which cloud service providers (CSP) do you use to host your services?
- How do you document and apply the shared security responsibility model (SSRM) between your organization, your cloud providers, and your customers?
- How do you manage configuration and hardening of cloud infrastructure?
- How do you segregate production and non-production environments?