It varies by vendor and plan. On Veriff's pricing page, session data is kept for 3 months on Essential and 6 months on Plus and Premium, with 2 years as a paid extra; deletion via API is a Premium feature. Sumsub's clients set retention within the contract. Incode says session data is deleted no more than 24 hours after the session. Yoti says most methods delete data once the check completes, and results are stored for the client for 6 months. Stile deletes raw ID data on completion by default, and evidence under review stays until the review resolves. Whatever you choose, your own systems should store the result and the audit record, not the document.