Skip to content
Clairos Learn

Safety, privacy, and governance · Lesson 5 of 15 · 8 min

Check data retention

Retention describes how long data is kept and for what purpose. A retention setting should match policy and actual deletion behavior, not just a label in a form.

Mastery 0/3Run itExplain itApply it
learner@clairosSimulated AI Ops lab
learner@clairos:~ $
↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Understand the pattern

Retention describes how long data is kept and for what purpose. A retention setting should match policy and actual deletion behavior, not just a label in a form.

Interpret the evidence

Reconcile the 30-day setting with the seven-day policy and verify deletion behavior.

A tempting mistake

A policy statement automatically changes the configured retention.

All names, measurements, prices, versions, and thresholds in this exercise are fictional training data. The evidence supports this bounded scenario, not a claim about a live provider.

Worked example and expected result
$ cat /opt/ai-lab/cases/aiops-safety-governance-005.json
{
  "fixture": "Fictional training data; not a live measurement.",
  "policy_days": 7,
  "configured_days": 30,
  "deletion_verified": false
}

Exit status: 0. The command completed successfully in the training fixture.

$ jq .configured_days /opt/ai-lab/cases/aiops-safety-governance-005.json
30

Exit status: 0. The command completed successfully in the training fixture.

$ printf '%s\n' 'reconcile-retention' > /home/learner/lab/aiops-safety-governance-005-decision.txt
(no output; exit 0)

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Name the assumption that would have to change for “reconcile-retention” to stop being the justified action. Do not silently replace missing evidence with a guess.

Explain it

What does the evidence in “Check data retention” justify?

Apply it elsewhere

A colleague concludes: “A policy statement automatically changes the configured retention.” What should you do?

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: Inspect access boundariesTry an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

  1. 01Locate sensitive fieldsSensitive-field review depends on context and policy. Distinguish operational metadata from credentials and personal data before exporting a diagnostic record.Practice
  2. 02Inspect access boundariesAccess boundaries limit which subjects can read or change which resources. Relevance to a task does not grant permission to cross a tenant or role boundary.Practice
  3. 03Read a model cardA model card records intended uses, limits and evaluation context. It is an evidence source for review, not a guarantee of suitability for every deployment.Practice