Secure deletion removes data from primary storage, backups, replicas, caches, and any derived artifacts such as search indexes and embeddings. Cryptographic erasure destroys the keys rather than the data itself.
Verification and certification requirements vary by contract.
Alternative Names:
Secure Deletion, Data Destruction
Why it Matters?
Backups and derived artifacts are where deletion commitments fail, since removing a document from primary storage leaves copies in backup sets, search indexes, and any vector embeddings generated from it. Vendors committing to deletion should be asked specifically about those categories and about the timeline, since backup rotation may mean actual removal takes months. Cryptographic erasure addresses the problem where keys can be destroyed.
Frequently Confused with
Related terms
Frequently asked questions
Why is deletion harder than it appears?
What is cryptographic erasure?
