Skip to main content

Search

Pinnacle Series Technical Configuration

Articles about technical configuration of the Pinnacle Series platform

EP background

Understanding Data Anonymization in Pinnacle Series

Eagle Point Software Knowledge Base

Quick Answer

When a user is deleted in Pinnacle Series, or a tenant's subscription expires, only that user's Display Name and Email Address are anonymized - first replaced with an anonymized identifier after 90 days, then permanently deleted after 1 year. All other usage, activity, and reporting data is never deleted and remains in reports indefinitely, identified by the anonymized identifier.

What This Article Helps With

  • Understanding what triggers data anonymization in Pinnacle Series
  • Understanding exactly what happens to a user's Display Name, Email Address, and other data at each stage
  • Understanding what usage and reporting data is retained, and for how long
  • Preparing for anonymization if you need to retain named reporting history

How Data Anonymization Works

Pinnacle Series anonymizes user data to align with GDPR Article 32. Anonymization begins when a user is deleted from Pinnacle Series, or when a tenant's subscription expires, and happens in two stages.

Stage 1: Soft Anonymization (90 Days After Deletion)

90 days after a user is deleted (or a tenant's subscription expires), the user's Display Name is replaced with a unique anonymized identifier, and their Email Address is replaced with an anonymized address built from that identifier on the existing domain. This change is visible consistently across Pinnacle Series, including in reports, which display the anonymized identifier instead of the original name from this point forward.

All other data associated with the user - including usage history, course and assessment completions, and activity data - is not affected at this stage and continues to appear in reports as before.

Stage 2: Hard Anonymization (1 Year After Deletion)

One year (365 days) after deletion, the user's original Display Name and Email Address are permanently deleted. No other usage, activity, or reporting data is deleted at this stage, or at any stage of the anonymization process - usage data is never deleted. Only the Display Name and Email Address are ever removed.

Recovering a User's Name or Email Before Hard Anonymization

  • Within the 365-day window, before hard anonymization occurs, Support may be able to recover a deleted user's original Display Name and Email Address. Contact Support if you need this information restored.
  • After the 1-year mark, the original Display Name and Email Address are permanently deleted and cannot be recovered.

Helpful Tips

  • If you need to know which named individual is associated with specific completions or results in your reports, export that information before the 90-day mark. After that point, reports display an anonymized identifier instead of the person's name.
  • Usage and activity data itself is never deleted and remains visible in reports indefinitely, identified by the anonymized identifier after 90 days.

Common Questions

Does Anonymization Delete a User's Course Completions, Assessment Results, or Other Activity Data?

No. Only the Display Name and Email Address are ever anonymized or deleted. All other usage, activity, and reporting data is retained indefinitely.

Can I Recover a User's Original Name or Email After It's Anonymized?

Within the 365-day window before hard anonymization, contact Support to request recovery. After 1 year, the original Display Name and Email Address are permanently deleted and cannot be recovered.

What Should I Do if I Need Named Reporting History Long-Term?

Export the relevant reports before the 90-day anonymization mark, while the Display Name is still shown.

Still Need Help?

If you have questions about data anonymization in Pinnacle Series, log a support ticket.