Yes, you need to keep the invoices with the users name and address on it (and probably a customer record in the ERP system). But - for example - if you provide

Yes, you need to keep the invoices with the users name and address on it (and probably a customer record in the ERP system). But - for example - if you provide a service that stores a users portrait picture, you need to delete the portrait picture upon request. You don’t need that for a financial audit.