Following a review by my information security team they have asked me what the retention period on 'Jira' and 'Confluence' is (we are a cloud customer) and I cannot find a statement on this on the Atlassian site.
I am told that any kind of ‘permanent’ retention is going to be a red flag for the auditors and have been asked to see if we can set as retention data on all data stored in Jira and Confluence for say, 10 years.