A retention policy specifies how long chat histories, backups, or other stored records remain available before secure and permanent deletion. Set the period according to legal requirements, business needs, and the sensitivity of the data. section 9.5 section 9.6.2
Apply a retention policy as an operational control:
- Define how long each record category must be retained, distinguishing requirements for chat histories, backups, and other stored data. section 9.5
- Delete records securely and permanently when their retention period expires. section 9.5
- Tell users how retention works and provide a way to download their chat history. section 9.5
- Match backup frequency and retention to application scale; small applications should use daily backups with a short retention policy. section 9.6.2
Production backup setting
A small application can configure daily backups while retaining them for a short period, then permanently delete expired backup data and document the policy for users and operators. section 9.6.2 section 9.5
