GDPR configuration

As mentioned in the GDPR section of the Helpful information article, fulfillmenttools is GDPR-compliant.

All customer-related data that was needed for the fulfillment process (like names, addresses, and contact details) is anonymized once all evolved entities are operationally in a final state. The exact date for anonymization is configurable via API.

Change GDPR configuration

Prerequisites

• Have an Administrator role

The values of the GDPR configuration are:

• retentionTime defines how many days after creation, operationally finished processes are anonymized. Default value: 30 days after the process is operationally finished.

• deletionTimeAfterRetention defines when anonymized entities are deleted. Default value: 180 days.

This deletion functionality only deletes operational data. The anonymized data is still stored for analytics.

To check the current configuration, use the below endpoint:

GET endpoint

GET https://{YOUR_TENANT_NAME}.api.fulfillmenttools.com/api/configurations/gdpr

Response body

To change the default values, use the below endpoint:

PUT endpoint

PUT https://{YOUR_TENANT_NAME}.api.fulfillmenttools.com/api/configurations/gdpr

Request body

Response body

In the above example, we've set a retentionTime of 15 days and a deletionTimeAfterRetention of 5 days. If an order is created on 2026-01-01, the platform calculates:

• Anonymization date: 2026-01-15

• Deletion date: 2026-01-20

Changes to actorAnonymization might take up to an hour to take effect.