1. Docs
  2. Danger zone

Danger zone

Deleting the account: what it takes down, how long you have to change your mind, and why it is the one thing an owner cannot hand to anybody else.

Overview

Everything else in Canopy can be undone. Deactivating a person is reversible, removing a role can be granted again, a revoked invitation can be resent. Deleting the account is the exception, and it has a page of its own so that it is never something you reach by scrolling to the bottom of a form.

It is not instant. The account is scheduled for deletion rather than erased on the spot, and stays recoverable through support for a grace period the confirmation names. There is no self-service undo, so recovering means contacting us before that window closes.

What deleting does

Deleting tears down everything beneath the account, not just the account record.

Every application and every Environment inside them.Every identity, role, permission, and role assignment.Every API key.The subscription, cancelled straight away rather than at the end of the period.Everyone with access loses it immediately, before the grace period has run.The audit record survives. It is deliberately kept so that the history of an account outlives the account, including the record of its deletion.

Who can do it

Only the account owner, and no role can be composed that grants it. Every other capability in Canopy is delegable, including the ability to create administrator roles and hand them out; this one is refused unless the person asking owns the account, checked again when the request arrives rather than only in the interface. Confirming also means typing the account's exact name, which is there to defeat a mis-click rather than to slow you down.

Next Step

Everything an administrator can be granted, and the one thing nobody can, is listed in one place.

Environment
API version
v1.0
 On this page Was this page helpful?

Tell us how we can improve this guide.

Canopy