Keep for seven years, delete after ninety days — both halves of a retention policy are provable engineering claims, and most systems can prove neither.
