Feature Request: Ability to delete files from within backups

[test1234]

Hi Veeam

This is a critical and legally significant feature request. This post is being created after discussions with the Veeam engineers and their request for me to make this feature request.

Reference: Veeam Support - Case # 07708755

Context:
We have 40 clients. 2 of of our clients are leaving us and migrating to new provider. There is now a legal requirement to remove ALL TRACE of their data from our datacenters. We have deleted their raw data across all of our servers, however we are unable to remove their data from our backups/restore points.

These are unencrypted backups in this case. I am able to view the files in Guest File Restore etc, however after discussions with veeam techs it became clear I cannot delete anything from within Guest File Restore AND there are no scripts whatsoever that allow selection/deletion of data from restore points. We are now being threatened with legal action, and we remove to remove the restore points of DB backups for our other clients.

Notes: the concept of backing up different clients with different backup jobs was raised to me, it was mutually agreed this cannot always be achieved depending on server design and RPO for backups and data sizes.

Thus, the decision was made that this is a suitable feature request and totally valid/required in the eyes of Veeam already. Please review and let me know any questions

[PetrM]

Hi Marco and Welcome to Veeam R&D Forums!

At first glance, it looks like a potential vulnerability—either due to intruder actions or user mistakes—and furthermore, it contradicts the definition of a restore point: it is no longer a snapshot of the system state at a specific point in time if you modify it. Why can't you delete backups from disk using the existing capabilities?

Thanks!

[pybfr]

On what legal basis is the customer request based ?
Because it comes in contradiction with many important regulations related to data protection like NIS 2 or DORA. It is even a recognized exception to GDPR in Europe…
The trend across all data protection is directed toward more and more immutable which is exactly the opposite of what your customer demands…