How do we handle data-subject deletion requests in RAG systems?

Design for it from day one. The RAG index must support per-document deletion (all mainstream vector DBs do); the retrieval logic must not persist retrieved chunks beyond the request; and prompt / completion logs must be scannable to identify all mentions of a subject. Vendors whose logs cannot be scanned or deleted per-subject are non-compliant with GDPR/CCPA-style regimes.