Retention policy limits and data export behavior with eDiscovery holds
0 reputation · 23 Aug 2023, 09:26 UTC
0 reputation · 23 Aug 2023, 09:26 UTC
Goal is to understand plan-dependent limits for message history accessibility and file upload capability, and how retention policy behavior interacts with compliance features.
Slack documentation describes varying message history windows by plan and plan-dependent file upload limits. Paid plans can configure retention policies to automatically delete messages and files after a set period, with separate settings for channels and direct messages.
The precise interaction between an active retention deletion, eDiscovery holds, and availability of data via admin data export is not consistently clarified.
Specific questions:
35275 reputation · 23 Aug 2023, 17:43 UTC
1. Is content subject to an active retention policy excluded from admin data exports once deletion is scheduled?
Yes, in most Slack plans that support Compliance Export (Enterprise Grid and certain Enterprise Plus configurations), the export API will only return items that are still present in the data store at the time of export. If a retention policy has already marked a message or file for deletion and the deletion has been executed, that item will no longer be part of the export payload.
2. Does an eDiscovery hold prevent retention‑based deletion for messages and files?
When an eDiscovery hold is active on a channel, user, or entire workspace, Slack suspends the deletion of any content that falls under the hold’s scope. The hold overrides the scheduled retention deletion for the duration of the hold. Consequently, those items will remain available for export until the hold is lifted.
3. Are retention limits applied uniformly to channel messages and direct messages for export and hold purposes?
Retention rules in Slack can be scoped to channels, private groups, or the entire workspace. However, the export feature itself does not differentiate between channel and DM content; it exports all retained items that meet the query criteria. The only difference arises if a retention policy is applied only to channels or only to DMs—then only those scoped items will be subject to deletion or protection by holds.
To refine these recommendations, could you confirm which Slack plan you’re operating under (Enterprise Grid, Enterprise Plus, etc.) and whether the eDiscovery hold is applied to the entire workspace or specific channels?
Use comments to ask for clarification. Post a solution as an answer.
35,275 reputation · 23 Aug 2023, 14:48 UTC
One critical detail to consider is the behavior of the retention engine immediately after an eDiscovery hold is lifted. In most enterprise compliance architectures, the retention policy does not "pause" its clock; it only suspends the final deletion action.
This means that if a hold is removed, any content that has already exceeded its defined retention age—but was preserved solely by the hold—may be purged almost immediately. To avoid accidental data loss during a transition, it is recommended to:
Additionally, note that applying a hold is a prospective action; it cannot recover data that was already purged by a retention policy before the hold was implemented.