Retained NR certificates

When a participant is deleted (anonymized), Eduvem keeps a copy of their Regulatory Standards (NR) certificates: the institution, as the data controller, has to keep proof of the training. The Retained NR certificates section brings those copies together.

Where to find it

In Administration, Institution, open Retained NR certificates, in the People and access group of the side menu. The section is shown to institution administrators and higher profiles; managers and class administrators do not see it.

At the top, the section states the period in force, for example NR certificates of anonymized people are kept for 5 years. When the period is 0, the message is Retention of NR certificates of anonymized people is turned off for this institution. Certificates retained before that stay in the list until their own date.

Retained NR certificates section, with the retention period in force, the search by name or CPF and the still empty list

Which certificates are retained

When the participant is deleted, the completed certificates that are retained are those:

from classes flagged as NR certificate;
already digitally signed in the NR dual signature flow;
from contents whose title identifies an NR (for example “NR-35”, “Normas Regulamentadoras” or “Trabalho em altura”).

Other certificates are not kept. The copy keeps the name and CPF shown on the certificate. When the certificate was signed, the copy is the signed PDF itself; otherwise, a background routine generates the PDF within a few minutes, from the data as it was at deletion time.

The list

The columns are Name, CPF (masked), Content, Class, Completed on, Kept until, Status and Download. The Status column shows:

Retained - the copy is ready and the PDF can be downloaded.
Being prepared - the routine is still preparing the PDF; come back in a few minutes.
Failed - the PDF copy did not complete. The data is still retained; contact Eduvem support.
Not issued - the person never received that certificate (for example, a signature was still missing). The data is retained, without a PDF.

The Download PDF button is enabled only when the PDF is stored; otherwise it shows PDF unavailable - data retained. Every view and every download is logged.

To find someone, use the search: Search by name (at least 3 letters) or full CPF. The name search matches the beginning of the name.

Retention period

The period is set per institution in the Retention years field, from 0 to 20 years. The default is 5 years. Only platform administrators (the Eduvem team) change the field; to change your institution’s period, contact Eduvem support.

Saving 0 turns retention off and asks for confirmation first. From then on, the NR certificates of people who are deleted are not kept.
Certificates already retained stay until their own Kept until date.

Deleting before the end of the period

Requests from the holder about the retained certificate (access, early deletion) must be directed to the company, which is the data controller. If the company decides to grant a deletion request, the Eduvem team uses the row’s Delete now action, available only to platform administrators. The action asks for confirmation, cannot be undone, and completes within a few minutes, on the next run of the retention routine.

When the period ends

On the Kept until date, the copy is deleted and the holder’s data is removed. While the certificate is retained, the public verification page answers Authentic certificate - holder data removed (LGPD)., without showing the name. After deletion, the code shows Revoked Certificate. See How to validate a certificate.

In-person NR-35: a different mechanism

Don’t confuse retention with the in-person NR-35 requirement. Here Eduvem keeps copies of certificates already issued to deleted people. With the Require in-person NR-35 training setting, the NR-35 certificate is simply not issued yet until the participant accumulates 480 minutes of in-person attendance confirmed by the instructor in the class’s roll calls. See Roll call.