---
title: "Request deletion"
url: "https://nexora.apim.eu/apis/access-requests/versions/85552175-ec5d-4510-b24d-c293a66d9945/operations/requestRequestDeletion"
---

> Full API specification: https://nexora.apim.eu/apis/access-requests/versions/85552175-ec5d-4510-b24d-c293a66d9945.md

# Request deletion

`POST` `/requests/{requestId}/deletion`

Operation ID: `requestRequestDeletion`

Carries out a data subject's rights request immediately. Personal fields are permanently removed; activity that must be retained for audit purposes remains pseudonymized.

## Path parameters

- `requestId` (string, required)

## Request body (required)

Content types: `application/json`

## Responses

- `202` - Deletion initiated

## OpenAPI definition

```yaml
openapi: 3.0.3
info:
  title: Access & Onboarding Requests
  version: 1.0.0
servers:
  - url: https://api.nexora.example/v1
    description: Production
  - url: https://sandbox.api.nexora.example/v1
    description: Sandbox
paths:
  /requests/{requestId}/deletion:
    parameters:
      - name: requestId
        in: path
        required: true
        schema:
          type: string
          example: req_71ab
    post:
      tags:
        - Requests
      summary: Request deletion
      description: |
        Carries out a data subject's rights request immediately. Personal
        fields are permanently removed; activity that must be retained for
        audit purposes remains pseudonymized.
      operationId: requestRequestDeletion
      security:
        - apiKey: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - reason
              properties:
                reason:
                  type: string
                  enum:
                    - data_subject_request
                    - retention_expired
                    - duplicate
                source:
                  type: string
                  example: email dated 2026-08-18
      responses:
        "202":
          description: Deletion initiated
          content:
            application/json:
              schema:
                type: object
                properties:
                  request_id:
                    type: string
                  anonymized_at:
                    type: string
                    format: date-time
security:
  - apiKey: []
components:
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: apikey
      description: |
        Every call carries an API key in the `apikey` header. You generate the
        key in the Nexora AI portal under "My Apps"; it's shown exactly once.

        Each key has the scopes it's allowed to use attached to it. If one is
        missing, the API responds with `403` and `code: "scope_missing"`; the
        missing scope is in `details[].field`.
```