Research: Privacy engineering

Data Deletion Across Backups and Replicas

A deletion workflow must cover replicas, indexes, vendors and restores, with a separate clock for backup expiry.