app.dsar_requests
TableRow level security on
Data subject requests (Section 14.3) with the 30-day clock from receipt. The due date is derived in app.dsar_request_clock, never stored.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| subject_person_id | uuid | Yes | Person the request is about, when they have an account.References app.people.id |
| subject_email | text | No | Lowercased email the requester gave, used to verify identity and to reply. |
| request_type | app.dsar_request_type | No | Which right is exercised. |
| details | text | Yes | What the requester asked for, in their words. |
| received_at | timestamp with time zone | No | When the request was received; the clock starts here. Set by the database. |
| dsar_state | app.dsar_state | No | Lifecycle state, changed only by app.transition_dsar. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |