Envelopes containing P1, P2 and P3 data can be stored indefinitely in DocuSign. DocuSign is approved for P4 data collection, but envelopes containing P4 data may NOT live in DocuSign for more than 30 days.
A Berkeley Security reviewed plan is required to collect P4 Data and a storage solution (Perceptive Content, Terra Dotta, Ellusian or SharePoint) and must be used to store Envelopes with P4 Data.
Your department should have or implement a retention policy that complies with your department's/unit's regulatory requirements, policies and IT security guidelines.
Ask your Department's Data Proprietor about your Department's guidelines, and how to securely collect and manage the data you're collecting. Your Data Proprietor can be found on the Active Account sheet.