Compliance

An active hold suspends retention deletion and blocks erasure of the named subject.

No holds.

Every erasure is recorded with an Ed25519-signed, customer-verifiable certificate (§7).

No deletions recorded.

Permissions granted but not exercised in 60 days — least-privilege cleanup (iam §7.3).

No unused entitlements. 👍

Denial spikes and attempts on sensitive permissions — possible probing or misconfiguration.

No anomalies detected.