This depends on your business requirements, compliance obligations and the type of data being stored. Some organisations may only need to retain backups for a few months, while others may need to keep information for several years.

A clear retention policy can help balance your recovery requirements with storage costs and regulatory responsibilities.