app.org_deletion_requests
TableRow level security on
An Owner's request to delete the org (Section 14.7), separate from cancellation: made with step-up and the typed org name, it ends the subscription and makes the org read-only at once; the Owner may recover the org for 7 days, after which its data is deleted and the Owner receives a deletion certificate. Written only by app.request_org_deletion and app.recover_org_deletion.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| reason | text | No | Why the org is deleted, in the Owner's words. |
| requested_at | timestamp with time zone | No | When the Owner asked for deletion. |
| recover_until | timestamp with time zone | No | End of the recovery window: midnight on the org's calendar after the seventh whole day after the request; the org is deleted after it. |
| requested_by | uuid | No | Owner who asked for deletion.References app.people.id |
| recovered_at | timestamp with time zone | Yes | When an Owner recovered the org inside the window. |
| recovered_by | uuid | Yes | Owner who recovered it.References app.people.id |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |