Skip to content
Article 17Article 19

Right to Erasure Automation (Article 17)

Build an automated pipeline that finds and erases all personal data for a given data subject across all systems within 30 days of request.

€3,600–€5,400
EUR
80120
hours
4060
business days
Fixed scopeEU-nativeNDA pre-signed
💡Quick Answer

Build a Right to Erasure automation pipeline: when a deletion request arrives, the system automatically identifies all personal data for that subject across databases, file storage, logs, analytics, and backups — then erases it within 30 days with a cryptographically signed audit trail. Fixed price €3,600–5,400.

📋Why this service exists

Article 17 grants data subjects the right to erasure ('right to be forgotten'). Organizations must erase data within one month (Article 12(3)). The challenge: data spreads to dozens of systems, logs, analytics pipelines, and backups. Manual erasure is slow, error-prone, and hard to prove. Automated pipelines are the only scalable solution.

Article 17Article 19

What you get

  • Erasure request intake API
  • Data subject lookup across all configured systems
  • Automated erasure workflow (database, file storage, logs, analytics)
  • Backup erasure procedure documentation
  • Cryptographic audit trail per erasure request
  • Status dashboard for DPO
  • 30-day SLA enforcement with alerts

How we deliver

  1. Day 0
    You request quote → reply in 4 business hours
  2. Day 1–2
    Discovery call & scope clarification
  3. Day 3–5
    Contract signed, kickoff scheduled
  4. Day 5–7
    Implementation begins
  5. Day N
    Final deliverables + walkthrough call
  6. +30 days
    Free post-delivery support

Tools & technologies

PostgreSQLKafkaAirflowcustom Python/Go pipelinesAWS Lambda

Prerequisites

  • Data discovery/PII mapping completed (or concurrent)
  • List of all data stores where subject data lives
  • Legal review of erasure conditions (when erasure applies vs. legal hold)

Pricing

Base scope€3,600–€5,400
Estimated hours80120h
Hourly rate€45/h
Delivery time4060 business days

Within scope:

  • Up to 5 data stores
  • AWS or GCP infrastructure
  • Standard PostgreSQL/MySQL/MongoDB and S3/GCS

Outside scope (additional quote required):

  • More than 5 data stores (additional quote)
  • SAP/Salesforce/legacy ERP integration (additional quote)
  • Erasure from third-party processors (vendor negotiation — lawyers' scope)

📋Final price confirmed in proposal within 4 hours of your request.

Realistic timeline — what to expect

  1. T+0hSubmit request
  2. T+4hInitial proposal (business hours)
  3. T+1–3dDiscovery call
  4. T+2–3dFinal invoice
  5. T+3–5dContract signed
  6. T+4–6dPayment received
  7. T+5–7dService kickoff
  8. T+5–7d+NService complete
This timeline reflects EU B2B best practices. We protect both parties from misunderstandings.

Frequently asked questions

What about data in backups?
Backups are the hardest part. We implement a cryptographic erasure approach: encrypt the subject's data with a unique key, then delete the key when erasure is requested. The backup still contains ciphertext, but it's unreadable — GDPR-equivalent to erasure.
Can the 30-day SLA be shortened?
Technically yes, but Article 12(3) allows one month. Shorter SLAs increase system complexity significantly. Most clients target 7–14 days for a good safety margin.

Related services

Request a quote

You're requesting a quote for:

Right to Erasure Automation (Article 17)

Estimated: €3,600–5,400 · 40–60 business days

Initial proposal within 4 business hours, contract within 3 business days.

Where we'll send your proposal and invoice.

If you prefer to discuss by call.

🔒 Your data is encrypted in transit and at rest. Never shared with third parties.

Initial proposal within 4 business hours (EU hours, Mon–Fri 9:00–18:00 EET).

💼 Mutual NDA available on request before any sensitive discussion.