What about backups? They only keep backups for 30 days? They don't backup this data? Is the legal concept of data retention the same as the legal concept of data storage?
Retention means they still holding data. Even if they only hold data for 30 days, that's still data that can be leaked or stolen.
On-site LLMs are the future but that is quite the capital expense!