Rule that prevents anybody - even the administrators - from deleting files permanently

[EmanueleSilvestri]

We are a law firm and we experience that more and more often our clients (companies) are attacked by hackers who delete or encrypt their company data. Our clients lose their data despite double or triple servers being in place. 

We currently rely on the fact that it is possible to recover old versions of files using the version history tool. Thus in case of deletion or encryption we should be able to recover our data. However, my understanding is that the DB administrator (myself) can permanently delete the DB files and that after permanent deletion no version history is available.

I believe that, despite the two-step verification process, a hacker might get my credentials, access as DB administrator and permanently delete all our files, including old versions of files.

For us it is fundamental to have a subscription available that would disable permanent deletions not only by members, but by Admins as well. The files, in particular, should be deleted only after 60 days from subscription cancellation.

[Megan]

This idea has been closed due to inactivity. 

Thank you for your suggestion, and if you have another idea to share, please do! 

[Nancy]

Hi @EmanueleSilvestri! Thanks for your idea.

Can you please check our Data Governance add-on, and let me know if it’d perhaps help with what you want to achieve? 

Ping me, when you’ve seen my post.

Cheers!

[Nancy]

Hi again, @EmanueleSilvestri, and sorry for the nudge. Did you get the chance to check my previous post perhaps?

[EmanueleSilvestri]

Hi Nancy,

I don't think that is the right solution because I understand that the Admin can release a legal hold and thus remove the files:

"Release a legal hold

If you no longer need a hold, you can release the hold. This will remove all files associated with that hold and can't be undone. "

[EmanueleSilvestri]

I would need the legal hold to be irreversible or that, at least, (a) a notice is sent to Admin if a legal hold is released and (b) files associated with the legal hold be removed only a certain period of time after the release. 

[Nancy]

Thanks for the clarification, @EmanueleSilvestri!

Your idea is now open.

For anyone who likes this idea, please share how this would help you, and vote to show your support.

Our top-voted ideas are shared with our product teams to investigate in our regular reviews.

[EmanueleSilvestri]

Dear Nancy,

could you please tell me whether the following alternative solution is viable?

In addition to my current Dropbox Standard account named "CSP", I could create a new Dropbox Standard account named "BU".  Then I could share the files/folders located in the CSP account with the BU account. In case the Admin of the CSP account permanently deletes the files/folders located in the CSP account will such files also be permanently deleted from the BU account? Or will they be retained for 180 days?

Thank you.

Emanuele

[Jay]

Hi @EmanueleSilvestri, when a file is permanently deleted, this means that no one, even our support team, would be able to recover the file.

So, in your example, the BU team cannot recover the files. 

[Megan]

This idea has been closed due to inactivity. 

Thank you for your suggestion, and if you have another idea to share, please do!