{"owner":"The owner and sole operator (Alpha Covenant Holdings LLC, a Pennsylvania limited liability company, entity 0016032097)","responsibility":"Owner-operator (Document Owner and Records Owner for every SOP; no delegate exists)","rule":"Records of what a file printed are retained and never edited; a wrong record is withdrawn and annotated. Customer-submitted files are deleted within 30 days of termination. A record not named here is added to the SOP that creates it before it is relied on.","records":[{"sop":"SOP-01","record":"SOP texts and change logs","where":"backend/sops.py in version control; published /api/trust/sops","updated_by":"owner","update_trigger":"any procedural change; scheduled review","retention":"indefinite (version history)","public":true},{"sop":"SOP-01","record":"Review log","where":"db.sop_reviews","updated_by":"owner","update_trigger":"each review without text change","retention":"indefinite","public":true},{"sop":"SOP-02","record":"Receipt registry row","where":"db.receipt_registry","updated_by":"system at record time; owner only via SOP-06 withdrawal annotation","update_trigger":"every receipt","retention":"indefinite","public":true},{"sop":"SOP-02","record":"Receipt body","where":"db.receipt_registry.body (public when published)","updated_by":"system","update_trigger":"every receipt","retention":"indefinite","public":"when published"},{"sop":"SOP-03","record":"Held file copy with sha and date","where":"db.fedlists_meta, db.<source>_rows, filehistory","updated_by":"system on each fetch","update_trigger":"job cadence","retention":"current + change history","public":true},{"sop":"SOP-03","record":"Source-change log","where":"db.source_changes (/api/audit/source-changes)","updated_by":"system","update_trigger":"any hash change","retention":"indefinite","public":true},{"sop":"SOP-03","record":"Known limits","where":"knownlimits.py (/api/public-record/known-limits)","updated_by":"owner","update_trigger":"any source added, removed or found unreadable","retention":"indefinite","public":true},{"sop":"SOP-04","record":"Per-receipt telemetry","where":"receipt_registry.telemetry","updated_by":"system","update_trigger":"every receipt","retention":"indefinite","public":true},{"sop":"SOP-04","record":"API hold state","where":"db.sam_api_state, db.dol_api_state","updated_by":"system","update_trigger":"rate-limit response","retention":"rolling","public":true},{"sop":"SOP-05","record":"Match method per line","where":"receipt body (each check's match_method)","updated_by":"system","update_trigger":"every receipt","retention":"indefinite","public":true},{"sop":"SOP-06","record":"Corrections ticket","where":"db.corrections (/corrections)","updated_by":"owner","update_trigger":"any Class B finding or request","retention":"indefinite","public":true},{"sop":"SOP-06","record":"Withdrawal annotation","where":"receipt_registry.withdrawn","updated_by":"owner via remediation endpoint","update_trigger":"per ticket","retention":"indefinite","public":true},{"sop":"SOP-07","record":"Self-audit run","where":"db.self_audit_runs","updated_by":"system","update_trigger":"daily","retention":"indefinite","public":true},{"sop":"SOP-07","record":"Day archive + .ots proof","where":"db.archive_days","updated_by":"system","update_trigger":"daily; re-submission until attested","retention":"indefinite","public":true},{"sop":"SOP-07","record":"Known-answer drill run","where":"db.known_answer_runs","updated_by":"system","update_trigger":"weekly + on demand","retention":"indefinite","public":true},{"sop":"SOP-08","record":"Sentinel run and findings","where":"db.sentinel_runs (/api/audit/sentinel)","updated_by":"system","update_trigger":"every 15 min","retention":"indefinite","public":true},{"sop":"SOP-08","record":"Sources board snapshot","where":"db.sourcesboard_snapshots","updated_by":"system","update_trigger":"~10 min","retention":"latest only","public":true},{"sop":"SOP-08","record":"Government Data Status subscribers, incidents, webhook log","where":"db.govdata_subscribers; db.govdata_incidents; db.govdata_webhook_log; db.govdata_state","updated_by":"system","update_trigger":"15 min / daily","retention":"subscribers until unsubscribed; incidents indefinite","public":false},{"sop":"SOP-09","record":"Engineering log","where":"memory/PRD.md (private) and the SOP change logs (public, /api/trust/sops/changes)","updated_by":"owner","update_trigger":"every release","retention":"indefinite","public":"changelog public"},{"sop":"SOP-09","record":"Test reports","where":"test_reports/iteration_N.json","updated_by":"testing agent / owner","update_trigger":"every tested change","retention":"indefinite","public":false},{"sop":"SOP-10","record":"Security scan results","where":"db.security_scans","updated_by":"system weekly","update_trigger":"weekly","retention":"indefinite","public":true},{"sop":"SOP-10","record":"SBOM","where":"/api/trust/sbom; frontend/licenses.json","updated_by":"system / owner","update_trigger":"dependency change","retention":"current + history in git","public":true},{"sop":"SOP-11","record":"Road Watch runs","where":"db.road_watch_runs","updated_by":"system","update_trigger":"every 6 h","retention":"indefinite","public":false},{"sop":"SOP-11","record":"Visitor feedback","where":"db.site_feedback","updated_by":"visitor; owner sets status","update_trigger":"submission; owner action","retention":"365 days","public":false},{"sop":"SOP-11","record":"Partners and keys (hashed)","where":"db.partners, db.partner_keys","updated_by":"system / owner","update_trigger":"issue, revoke","retention":"indefinite (revoked kept)","public":false},{"sop":"SOP-11","record":"Batches and rows","where":"db.batches, db.batch_rows","updated_by":"system","update_trigger":"per cycle","retention":"rows deleted 30 d after termination; receipts kept","public":false},{"sop":"SOP-11","record":"Challenge submissions","where":"db.challenge_submissions","updated_by":"system; owner sets status published","update_trigger":"submission; publication","retention":"indefinite","public":"counts only"},{"sop":"SOP-11","record":"Annual inquiries","where":"db.annual_inquiries","updated_by":"system","update_trigger":"inquiry","retention":"indefinite","public":false},{"sop":"SOP-11","record":"Opportunity Watch notices","where":"db.opportunity_notices; db.selfcheck_state[opportunity_watch]","updated_by":"system","update_trigger":"daily read 00:20 UTC","retention":"indefinite","public":false},{"sop":"SOP-11","record":"Challenge submissions and published comparisons","where":"db.challenge_submissions","updated_by":"system","update_trigger":"on file receipt / on batch completion","retention":"indefinite","public":false},{"sop":"SOP-11","record":"Findings Feed rows and subscribers","where":"db.fac_feed_items; db.facfeed_subscribers; db.facfeed_webhook_log","updated_by":"system","update_trigger":"daily","retention":"rows indefinite; subscribers until unsubscribed","public":false},{"sop":"SOP-12","record":"Local backup set","where":"backend backup job output under /app/backups (capped)","updated_by":"system","update_trigger":"job cadence","retention":"rolling","public":false},{"sop":"SOP-12","record":"Disk findings","where":"db.sentinel_runs","updated_by":"system","update_trigger":"every 15 min","retention":"indefinite","public":true},{"sop":"SOP-12","record":"Off-site manifest copies","where":"Backblaze B2 bucket (Object Lock COMPLIANCE, 7 years) + db.offsite_copies; published /api/public/offsite-copies","updated_by":"system","update_trigger":"daily 05:40 UTC","retention":"7 years from write (store-enforced), row indefinite","public":true},{"sop":"SOP-13","record":"Outreach send log","where":"db.partner_inquiries; memory/drafts/*.md send logs","updated_by":"owner","update_trigger":"every send","retention":"indefinite","public":false},{"sop":"SOP-13","record":"Published offers and prices","where":"/annual, /partners, /challenge","updated_by":"owner","update_trigger":"any price or offer change","retention":"current + SOP change log","public":true},{"sop":"SOP-13","record":"Answers recorded (kind, one-line summary, who recorded, when)","where":"db.outreach_replies; partner_inquiries.reply_*","updated_by":"operator","update_trigger":"same day as the answer","retention":"indefinite","public":false},{"sop":"SOP-13","record":"Desk replies and answers (sender, text, matched letter, answer text, mode auto/manual, provider id)","where":"db.desk_replies; partner_inquiries.reply_answered_at","updated_by":"system","update_trigger":"each reply","retention":"indefinite","public":false},{"sop":"SOP-14","record":"Management review","where":"db.management_reviews (/api/trust/management-reviews)","updated_by":"owner","update_trigger":"monthly","retention":"indefinite","public":"summary public"},{"sop":"SOP-15","record":"Forms register, procedures, finder, desk","where":"code: backend/formsregister.py, formprocedures.py, govdesk.py","updated_by":"owner via release (SOP-09)","update_trigger":"on change","retention":"indefinite (git)","public":true},{"sop":"SOP-15","record":"Rule-as-printed and FR cache","where":"db.rule_cache","updated_by":"system","update_trigger":"per read","retention":"7 days / 24 h, then re-read","public":false},{"sop":"SOP-15","record":"FAC finding counts","where":"db.rule_cache (fac_counts)","updated_by":"system","update_trigger":"daily","retention":"24 h","public":true},{"sop":"SOP-15","record":"Coverage Ledger response","where":"computed from db.batch_rows","updated_by":"partner key holder","update_trigger":"per request","retention":"not stored","public":false},{"sop":"SOP-15","record":"Record History response","where":"computed per request from source modules and caches","updated_by":"public","update_trigger":"per request","retention":"not stored","public":true},{"sop":"SOP-15","record":"forms_named on registry rows","where":"db.receipt_registry.forms_named","updated_by":"system at record time","update_trigger":"every receipt","retention":"indefinite","public":true}],"count":45}