Data portability (GDPR Art. 20)

Article 20 of the GDPR grants data subjects the right to obtain their personal data in a structured, commonly used and machine-readable format, and to transmit it to another data controller. For users of an electronic signature platform, this right covers: signed documents and their audit trails, account metadata, and activity logs. Portability requires the service provider to provide a standardized export (JSON, CSV, ZIP) within one month. Conversely, the right to erasure (Art. 17) may be limited by legal retention obligations (evidential archiving 5–10 years) — signed documents cannot be erased as long as the legal period has not elapsed. Certyneo implements full account export via the customer portal and supports migration of archives to a third-party safe.