Security & DevSecOps
Practical
By Samson Tanimawo, PhD
Published Jan 9, 2026
4 min read
Data Retention Policy
How long to keep data. The policy.
By class
Operational logs: 90 days. Audit logs: 1 year. Compliance: 7 years.
Match to need.
Delete
Auto-delete past retention.
Cost and compliance both improved.
Legal hold
Override for legal reasons. Documented.
Don't delete during litigation.