I used to work for a company with a product for putting a legal hold on people’s accounts. It archived the data off to a safe place, with a signature so you can tell it wasn’t tampered with. By default, it kept things six months, but as soon as it ran, you’re free to delete the public copy