As far as I can tell we are not supposed to keep data for longer than is necessary to comply with GDPR but Kashflow does not offer any way to switch on archiving of data over 7 years old.  Removing this old data would also improve performance and would use less storage so it would benefit Kashflow too.