Core concept
Modes: Governance (privileged users can override) + Compliance (no one, not even root, can delete). Retention days or 'until date'.
Advertisement
How it works
Legal Hold: additional lock overriding retention. Applied indefinitely until explicitly removed.
Advertisement
Trade-offs + gotchas
Regulatory compliance. Ransomware protection (immutable backups). Audit logs. Anything requiring 'cannot be tampered with'.