How to meet it
OWASP AISVS v1.01
Memory, Embeddings & Vector Database Security · Memory Expiry & Revocation
Expired content stays out of results
Verify that expired vectors are excluded from retrieval results.
OWASP AISVS v1.01, requirement 8.3.1
In plain English
Once a vector has expired, it should no longer turn up in search results.
What good looks like
- Vectors carry expiry dates.
- Retrieval filters out expired items.
- Expired items are deleted on a schedule.
How teams usually do it
- Time-to-live settings or expiry metadata in your vector store.
Evidence an auditor would accept
- Configuration and tests.
Common mistakes
- Deleting the source document but leaving its embeddings searchable.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.