AI Data Persistence Taxonomy

Nine persistence categories

Inability-to-Cure Register

How Exit works


Nine categories. Most deletion clauses address only the first.

  • P1 Stored Data
  • P2 Vector Embeddings
  • P3 Fine-Tuning Artefacts
  • P4 Model Memorisation
  • P5 Cached Inference Outputs
  • P6 Prompt Logs
  • P7 Prompt-Borne Artefacts
  • P8 Backup and Disaster Recovery Copies
  • P9 Derived Analytics and Profiles

Exit tests the vendor’s deletion certificate against all nine persistence categories. It identifies which categories the certificate actually covers and which it doesn’t. The gap between what the certificate says and what the vendor’s system retains is the residual liability.

For each persistence category that cannot be deleted: the technical reason, the data subjects affected, the ongoing regulatory exposure, any commercial sensitivity in the irremediable data, the compensating governance measures, the named executive approving the residual risk, and the review date.

This is not a document about failure. It is evidence of governance. The enterprise that can produce this for every terminated AI vendor relationship has proof it knew its position, assessed it, and made decisions about how to carry it.

At the end of any AI vendor relationship. During vendor transition planning. When a vendor is acquired. Any time you need to document what the enterprise carries permanently.

Document what stays

If you are ending an AI vendor relationship, Exit tells you what you still carry and how to govern it.

Request a Briefing Read the White Paper