When are deleted attachments truly deleted from Jira's cloud storage?

[zane]

I'd like a reference to this policy in writing, so a link to one of their published pages would be great. If the answer is "immediately," that's great (and I fear I won't be able to find that in black-and-white). But if it's that they purge all of the files marked for deletion within X days of the user having chosen to delete them... I want that. I want to know so I can refer to this Jira policy when describing my own data destruction compliance.

[Tim Perrault]

Hi @zane 

Currently, if an attachment is deleted in Jira Cloud, there is no way to restore it apart from importing a backup.  Reference

For Jira and Confluence Cloud, Atlassian utilises the snapshot feature of Amazon RDS (Amazon Relational Database Service) to create automated daily backups of each RDS instance. Amazon RDS snapshots are retained for 30 days with support for point-in-time recovery and are encrypted using AES-256 encryption. Reference

[zane]

Thanks for that.

Those articles are not quite the smoking gun I want, unfortunately. The first only says that I can't get it back, not that they don't still have it. The second only says that it's in S3, but not when and whether they ever really delete it from S3. (And full deletion in S3 is a nuanced topic, given versioning.)

It is is nice to know that it's RDS and S3 tho, because then I know (and can refer to) AWS's NIST-compliant policy for full data deletion (ex: in device disposition) if I need to.

I guess the practical thing I'm concerned about is that my action as a user, in UI or API, to delete a document, might only mark it as deleted (perhaps to be later purged in a scheduled sweep) rather than actually deleting it at the time of my request.

[Tim Perrault]

Maybe this  I only skimmed it, but closer I think to what you are looking for.