My reply to a post on LinkedIn.

“When choosing Cloud vs on-premises, we need to be reminded that a “no decision” is a decision and the risk should be assessed. ”

My comment:

A good reference for such data’s retention is the FDA’s Guidance for Industry 21 CFR Part 11; Electronic Records;Electronic Signatures; Maintenance of Electronic Records.