Solid is just the technical part. You're also going to need the regulatory part that says it's illegal for a company stores data after you revoke access.

But the technical part is still necessary.