Record Data-Retention Addendum

Draft pending counsel review and execution. Publication does not create a Record commitment. This Addendum applies only when an Order Form identifies it and is executed by Customer and The Plain Works Co.,Ltd.

This Addendum supplements the Reshot Terms and DPA between Customer and The Plain Works Co.,Ltd., business registration number 293-87-03653. It controls over ordinary deletion only for eligible evidence expressly designated "Record."

1. Record evidence

Record evidence means the signed run manifest, evidence pack, independent time anchor, captured renders and checksums specifically sealed under a Record Order Form. It excludes ordinary workspace/account data, drafts, billing records, customer-attested local or CI captures, and any artifact that did not complete the required custody and seal process.

2. Fixed term

The Order Form selects one immutable term for each artifact at seal time:

Term	Contract option
3 years	Record Starter
7 years	Record Program
10 years	Record Enterprise

Renewal may extend future coverage but does not shorten an existing artifact's term. A longer term requires a written amendment or new seal rule.

3. Holds

A documented legal or regulatory hold suspends scheduled destruction for the scoped artifact, run, contract, or property. Access remains restricted. Release of a hold returns evidence to its original schedule; evidence already past expiry is queued for destruction. Customer must identify authorized hold administrators and promptly release obsolete holds.

4. Expiry and destruction

Absent a hold, Reshot hard-deletes stored evidence bytes after expiry through a monitored scheduled job. A minimal destruction ledger may remain, containing identifiers, hashes, scheduled/actual destruction time, reason, and outcome but not the destroyed renders. A short operational delay until the next successful job does not extend the contracted evidentiary term.

Encrypted backup fragments may persist up to 35 days after live deletion and are not available for ordinary retrieval. They remain protected and are overwritten on the backup cycle.

5. Early deletion and legal requests

The preservation purpose means Customer may not ordinarily delete Record evidence early. A verified request is logged and applied at expiry unless mandatory law requires earlier deletion. If legal requirements conflict, the parties will cooperate on restriction, minimization, or lawful destruction.

6. Verification and limits

While bytes exist, exported packs can be checked offline with the open verifier. After destruction, a previously exported signed manifest and anchor may still prove the hash and time, but Reshot cannot re-serve destroyed renders. Record attests to sealed integrity/provenance/timing within scope; it is not legal advice, compliance certification, expert opinion, or guaranteed admissibility.

7. Security, subprocessors, and audit

The DPA, Security Overview, and Subprocessors page apply. Any promised residency, recovery, service level, declaration, or specialized audit support must appear in the Order Form. Customer may request a destruction record for its scoped evidence.

8. Contact and execution

Privacy/DPA: privacy@reshot.dev Record/security review: security@reshot.dev

No party is bound by this Addendum until an authorized representative of each party executes an Order Form that incorporates version 2026.08.25.