# AI erasure request evidence map

An invented requester’s information appears in a support record and several AI-related copies. Each row identifies a distinct action and the evidence needed.

Synthetic request ERASURE-TEST-01. No live data has been searched, deleted, retained under a legal hold or sent to a provider.

Source: https://aona.ai/resources/guides/gdpr-ai-chat-deletion-requests/
Sources checked: 2026-09-21

## Follow the copies

### Source

Customer record in its original system

### AI

Conversation, saved file, project or memory

### Exports

Documents and security evidence

### Response

Confirmed actions and explained exceptions

| Location | Action to assess | Evidence and owner |
| --- | --- | --- |
| Original support record | Apply the organisation’s Article 17 decision to the source record. | Privacy decision and source-system action record; support-system owner. |
| ChatGPT conversation | Use the applicable conversation deletion control if erasure is required. | Correct account/conversation and action confirmation; workspace owner. |
| File saved to Library | Assess and remove the saved file separately where required. | File identity and confirmation; file/workspace owner. |
| Project file or saved memory | Review its separate storage and deletion control. | Relevant object and actual action; authorised workspace user or administrator. |
| Draft copied into a document | Assess this separate retained copy. | Document owner’s confirmation and scope; collaboration-system owner. |
| Exported security evidence | Determine necessity, erasure or applicable retention exception. | Reasoned privacy/legal decision and access restriction; security record owner. |
| Request response | Reconcile confirmed actions and explained exceptions. | Clear response and case record; privacy operations. |

## Review checklist

- [ ] Map all relevant copies
  Use the actual account, surface, feature and saved locations rather than assuming one conversation contains everything.
- [ ] Separate legal and technical status
  Record the erasure decision, any justified exception and whether the action is requested, completed or scheduled.
- [ ] Reconcile before replying
  Check recipient communications, provider responses and the Article 12 response timeline.

## Included example files

- ai-chat-erasure-evidence-map.md
- ai-chat-erasure-evidence-map.csv

## Source references

- EU GDPR: Regulation (EU) 2016/679: https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng (2026-09-21)
- OpenAI: ChatGPT Work Cloud data handling and retention: https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security#data-handling-and-retention (2026-09-21)

Use the worksheet within the relevant legal, contractual and technical scope. It is not a certification or a record of an installed-product test.