For compliance with GDPR and the DPG standard, we need to make sure we have clear documentation on:
- how to export PII data (I think this can only be done by the superadmin? so saas users would need to email us to request this?)
- how to export non-PII data
- how to delete data
We should make clear how this can be done in OpenFn today (and later update this if we add features to export inputs/outputs sets via the app UI).
We might also consider updating the Security & Compliance page to link to this new docs page.