Forge Object Store: data residency eligibility, object lifecycle on uninstall, and deleted data in backups

We are building a Forge app that stores customer-supplied verification evidence (screenshots, logs, step records) and are deciding whether Forge Object Store is the right medium. Three questions are blocking that decision, because each determines what we can accurately commit to customers in our terms. We could not find these answers in the documentation.

1. Is Forge Object Store data residency-enabled?

The Runs on Atlassian criteria state that eligible apps must “use data residency-enabled Forge storage, or store data in Atlassian apps using Atlassian app entity properties”. The Object Store reference and limits pages do not say whether Object Store meets that description. Does storing objects in Forge Object Store satisfy that criterion today, while it is in Preview?

2. What happens to objects in Object Store when an app is uninstalled?

The hosted storage data lifecycle page states that it “only discusses Forge-hosted Persistent storage and doesn’t include remote or other types of storage”, so its soft delete and 21-day relink window appear to describe KVS and the entity store rather than Object Store. For Object Store specifically: are objects soft deleted and retained for a period, is the same 21-day relink window available, or are they deleted immediately? Is there a documented retention policy we can cite?

3. How long does data an app deletes remain in platform backups?

When an app deletes a key from the Key-Value Store, a row from Forge SQL, or an object from Object Store while the app stays installed, is the data removed from primary storage immediately, and how long can it persist in Atlassian’s backups afterwards? The cloud architecture page gives 30 days for RDS snapshots of Atlassian’s own products; we could not find whether that period, or any other, applies to Forge hosted storage. We want to tell customers that deletion is final in the app and that backups expire on a stated schedule, and we can only state the schedule if it is documented.

We are asking because we would otherwise have to state an evidence retention period to customers without knowing what the platform guarantees, and we would rather say less than we know than more.

Pages consulted: Object Store reference, Object Store limits, hosted storage data lifecycle, Runs on Atlassian, Forge platform pricing.

Hello @qianmiao! :waving_hand:

1. Is Forge Object Store data residency-enabled?
Forge Object Storage is indeed compliant with data residency out of the box. Together with KVS, CE and SQL offerings, all of these are DaRe compliant.

2. What happens to objects in Object Store when an app is uninstalled?
&
3. How long does data an app deletes remain in platform backups?

With regards to your questions on data retention and backups, everything related to Object Storage data lifecycle is aligned with the general Forge policies: https://developer.atlassian.com/platform/forge/storage-reference/hosted-storage-data-lifecycle/#data-storage-during-app-lifecycle-stages

The objects are indeed soft-deleted and retained, with the same 21-day relink window available.

As for disaster recovery, Object Store utilizes a soft delete method for all objects. This means that if an item is accidentally deleted, it will only be permanently deleted after 30 days. Within this time frame, the object can be restored at any point.

Let us know if you have further questions. In the meantime we will review our public documentation to find gaps and better ways to represent this information for general reference.