The repository, the database and a documented export of every record, in a format you can open without us. Sign-in runs through your own Okta or Google Workspace directory, so removing someone's access never depends on us. If you move to different software later, your data goes with you. It is your customer list, not ours to hold.