Their zdr is not a concrete promise though, there's no way to verify that the provider is not storing the logs