Org data export

Org data export is the Data Export tab on the organization surface: how tenant data leaves in bulk. Exports cross the Org egress boundary by definition, and each one is an auditable event in Org audit.

• The export covers tenant-owned records, audit rows, and branding asset metadata for the organization. Download links expire after 24 hours.
• The export uses the tenant inventory and excludes global identity registries. Secret-like fields are redacted.
• Every export gets a requester, a reason, and a window. An export with none of the three is indistinguishable from exfiltration in the audit.
• After exporting, verify receipt and delete the working copy. The audit records the export; it cannot clean up copies you left behind.

What next

• Org egress: the allowed outbound destinations exports must match.
• Org audit: where each export is recorded.
• Security: sign-in and least-privilege hygiene around who may export.