If you use PolicyPak Cloud UI and use the command “DELETE PERMANENTLY” (as seen here) then, at next SYNC of the Cloud Client to the Cloud Service, all cloud pieces (Cloud agent and Cloud CSE) are physically removed from the endpoint automatically.