Data doesn’t retire, it just gets cheaper to keep

Retention horizons across Asia Pacific now outlast the storage hardware, the vendor contract, and the career of the administrator who configured them. That makes long-term retention a lifecycle problem, not a storage problem.

In its licence conditions, Singapore’s Ministry of Health sets out how long a healthcare provider must keep patient health records. For computerised records, the requirement is the patient’s lifetime plus six years.

Now read that as an infrastructure requirement rather than a compliance one. You are being asked to guarantee the retrievability of a data set for longer than you will be doing this job, longer than the array it sits on will be supported, and longer than most of the contracts governing it will run.

Singapore is not an outlier. Japan’s Companies Act requires accounting books to be preserved for 10 years, and since 1 January 2024, the Electronic Bookkeeping Act has required electronic transaction records to be kept in original digital form, searchable and tamper-evident, rather than printed. Indonesia requires bookkeeping documents held for 10 years under three separate laws. India’s Companies Act requires books of account for eight financial years. Hong Kong requires business records to be kept for at least seven years under its Inland Revenue Ordinance, while Malaysia also mandates a seven-year retention period.

Nobody designs for this. What happens instead is that a decision gets made once — write it to tape or push it to a cold bucket — and then it gets inherited.

Three pressures, arriving at once

That inherited decision is now costly because three forces are reshaping long-term retention at once, and none existed at this scale when most retention policies were written:

Data is growing faster, and AI is increasing both how much data organizations generate and how long they feel compelled to keep it. Unstructured file data tends to grow fastest, and it is often where redundant, obsolete, and trivial data quietly accumulates on the most expensive tier in the estate, because that is where it landed and nothing moved it.
Buying your way out has become harder. Hard drive supply is effectively spoken for: At the beginning of the year, Western Digital told investors it is “pretty much sold out for calendar ’26,” and Seagate said its nearline capacity is “fully allocated through calendar year 2026.” By April it was telling investors that capacity was almost fully allocated through 2027. The traditional answer to a capacity problem, buying more disk, now has a lead time measured in quarters.
The burden of proof is rising. An auditor asking you to demonstrate that a record has not been altered in five years is asking a question many estates struggle to answer, because archive, backup, and compliance reporting often live in separate tools with no evidence trail between them.

More data, kept longer, proven clean, in a specified location, on storage that is harder to buy? Static retention was not built for any of that.

The real question is not where cold data lives

Who is responsible for moving the cold data, and what happens when they stop?

Long-term retention fails quietly. It does not fail on the day the archive is written. It fails years later, when someone needs a 2026 restore point and discovers that the tiering rule was never updated after the storage refresh, or that the manual monthly offload stopped when the person who ran it changed teams, or that the retention policy was set on a repository that no longer exists.

Every one of those is a process failure wearing a technology costume, which is the predictable consequence of treating retention as a static decision rather than an automated lifecycle.

The alternative is not complicated. Recovery-critical data stays on a performance tier where it can be restored quickly. As restore points age past the window where anyone will realistically recover from them, they move automatically, by policy to a capacity tier, and then to an archive tier priced for data that must exist rather than data that must be fast.

In Veeam terms, that is a Scale-Out Backup Repository with performance, capacity, and archive tiers, with data transferred to archive from either tier above it. Grandfather-Father-Son restore points move or copy from Veeam Data Cloud Vault into Veeam Vault Archive on policy, without anyone deciding to do it that month.

The point is not that the tiers are cheaper. The point is that no human must remember.

An honest word about tape

It would be convenient to say that tape is dying. It is not. Linear Tape-Open (LTO) capacity shipments grew 57% year on year in Q1 2026, according to the LTO Program itself, driven by AI and archive demand.

The honest case against tape for long-term retention is not that the medium is unreliable. It is that tape keeps a manual operational loop alive: Media handling, rotation schedules, offsite transport, physical custody, and a restore path measured in the time it takes to locate and mount a cartridge. Every one of those steps depends on a person continuing to do a thing. Over a 10-year horizon, that is the weakest link; not the media itself. Veeam supports tape, so this is a point about operating burden, not a ban on the medium.

Sovereignty stopped being a veto

For years, the residency objection killed the cloud half of this conversation in regulated Asia Pacific markets. If the data must stay in the country, and the archive is in another jurisdiction, the conversation ends.

That objection has weakened, and the market has noticed. Gartner forecasts worldwide sovereign cloud IaaS spending will reach $80 billion in 2026, up 35.6% year on year, with Mature Asia/Pacific growing 87% and Japan 79.6%. Those are not the growth rates of a region that has ruled out cloud. They are the growth rates of a region that treats sovereignty as a buying criterion rather than a reason to avoid cloud.

The demand underneath is real. IDC research for Expereo found 51% of APAC organisations want greater control over sensitive and strategic data, and 38% rank digital sovereignty as a top priority, against 33% globally.

Sovereignty is no longer a reason not to move. It is a specification.

What an automated archive tier looks like

Veeam Vault Archive is the archive end of that lifecycle: A fully managed, archival-class tier built on Azure Blob Archive storage, at $4.50 per TB per month (billed annually). It carries the same security posture as the rest of Veeam Vault: Immutable by default, AES 256-bit encryption, logically air-gapped, rather than security bolted on after the fact. Veeam Vault Archive is available in named Azure regions in Singapore, Japan, Australia, India, Indonesia and Malaysia, among others, with customer-controlled encryption keys; confirm that this meets your regulator’s wording on residency.

One architectural detail matters more than it first appears. A conventional archive tier requires a temporary archiver appliance deployed in the customer’s own cloud subscription to handle the transfer. Vault Archive does not: Backup data is consolidated natively within Veeam Data Cloud, with no extra compute to deploy, manage or pay for. Over a 10-year horizon, every piece of infrastructure you do not have to maintain is one fewer thing that can quietly stop working.

Two capabilities carry the lifecycle argument. The first is automatic GFS tiering: Long-term restore points move or copy from Veeam Vault into Veeam Vault Archive by policy.

The second, new in Veeam Data Platform 13.1, is NAS direct to archive. Large unstructured data sets can be ingested straight into the archive tier rather than staged through performance and capacity storage first, which matters because staging data through premium tiers to get it somewhere cheap is an expensive way to save money. Threat detection and malware scanning now extend to NAS, so data can be scanned and validated as clean before it is retained long term.

And one honest trade, because it is the thing most likely to cause a bad conversation later: Archive retrieval takes more than 15 hours and is billed separately, and Veeam Vault Archive carries a 180-day minimum retention. Retrieval is slow, but nobody must find, mount, or ship anything. Veeam Vault Archive is a compliance tier, not a recovery tier. Recovery-critical data belongs on Veeam Vault. The discipline is in knowing which is which, and in letting a policy, rather than a person, enforce the boundary.

The question worth asking

The right question to ask is not, “Where should our cold data live?” That is a procurement question and it has an easy answer.

Instead, the question to ask is: “If the person who configured our retention policy left tomorrow, would our data still move to the right tier at the right time for the next 10 years, and would we be able to show that it did?”

Retention horizons in this region now outlast the people who set them. The only retention strategy that survives that is one nobody has to remember.

Go deeper

This article accompanies Beyond the Vault: Rethinking Immutability, Retention, and Resilience, a three-part webinar series for security, infrastructure and risk leaders across Asia Pacific and Japan. Session 2, Rethinking Retention: The Automated Backup Lifecycle, walks through lifecycle tiering from performance tier to archive, the NAS direct-to-archive on-ramp, and how data residency and sovereign retention requirements apply to organisations operating across APJ.

Retention, residency, and record-keeping requirements vary by jurisdiction, sector and record type, and continue to evolve. The periods cited are current as at publication and are provided as general context only. Organisations should confirm their specific obligations with their own regulator or legal counsel.

References

Ministry of Health, Singapore, Licence Conditions on Retention Periods of Patient Health Records — computerised records: lifetime plus 6 years; paper adult inpatient records: 15 years. https://isomer-user-content.by.gov.sg/7/66fedf54-1071-481b-8f7b-105d28bcd30b/lcs-on-retention-periods-of-patient-health-records_1-0.pdf
Japan Companies Act, Article 432(2) — accounting books preserved 10 years from closing; Electronic Bookkeeping Act electronic retention mandatory from 1 January 2024. https://monolith.law/en/general-corporate/accounting-books-financials-japan
Indonesia, General Tax Provisions Law (UU KUP) Article 28(11), Customs Law Article 51(3) and Law No. 8/1997 Article 11(1) — 10-year retention. UU KUP: https://jdih.kemenkeu.go.id/fulltext/2007/28tahun2007uu.htm. Law 8/1997: https://fiskal.kemenkeu.go.id/files/peraturan/file/1997%20UU%208.pdf. Customs Law (commentary): https://news.ddtc.co.id/berita/nasional/1805429/alasan-dokumen-dasar-pembukuan-wajib-disimpan-selama-10-tahun
India, Companies Act 2013, Section 128(5) — books of account for not less than eight financial years. https://ca2013.com/128-books-of-account-etc-to-be-kept-by-company/
Hong Kong Inland Revenue Department, Inland Revenue Ordinance Section 51C — business records retained not less than 7 years. https://www.ird.gov.hk/eng/tax/bus_rke.htm
Malaysia, Companies Act 2016 Section 245 and Income Tax Act 1967 Section 82 — 7-year retention. LHDN Public Ruling No. 4/2000 (ITA s82): https://www.hasil.gov.my/wp-content/uploads/PR4_2000_Rev.pdf. Companies Act s245 (commentary): https://www.ashtoncorporate.com/post/accounting-records-keeping-a-mandatory-requirement-in-malaysia
Veeam, Archive Tier, Veeam Backup & Replication User Guide — archive tier attached to a scale-out backup repository; data transferred from performance or capacity tier. https://helpcenter.veeam.com/docs/vbr/userguide/archive_tier.html
Veeam, Capacity Tier, Veeam Backup & Replication User Guide. https://helpcenter.veeam.com/docs/vbr/userguide/capacity_tier.html
LTO Program, LTO Capacity Shipments Grow 57% YoY in Q1 2026 as AI and Archive Demand Accelerates, September 2026. https://www.lto.org/2026/09/lto-capacity-shipments-grow-57-yoy-in-q1-2026-as-ai-and-archive-demand-accelerates/
Gartner, Gartner Says Worldwide Sovereign Cloud IaaS Spending Will Total $80 Billion in 2026, 9 February 2026 — 35.6% growth; Mature Asia/Pacific 87%, Japan 79.6%. https://www.gartner.com/en/newsroom/press-releases/2026-02-09-gartner-says-worldwide-sovereign-cloud-iaas-spending-will-total-us-dollars-80-billion-in-2026
IDC InfoBrief for Expereo, Enterprise Horizons 2026 — 51% of APAC organisations want greater control over sensitive and strategic data; 38% of APAC organisations rank digital sovereignty a top priority versus 33% globally, Media OutReach release, 15 September 2026. https://www.malaymail.com/news/money/mediaoutreach/2026/09/15/over-half-of-apac-businesses-want-greater-control-over-strategic-data-in-latest-digital-sovereignty-push-new-research-shows/482925
Veeam, Veeam Vault Archive — archival-class tier, policy-based tiering, direct NAS ingest, malware scanning, immutability and AES 256-bit encryption. https://www.veeam.com/blog/veeam-vault-archive.html
Veeam press release, Veeam Launches Data Cloud Vault Archive, 29 July 2026. https://www.veeam.com/company/press-release/veeam-launches-data-cloud-vault-archive-to-help-organizations-remain-compliant-while-reducing-the-cost-of-protecting-cold-data.html
Veeam, Veeam Data Cloud purchasing options — Vault Archive $4.50 per TB per month, billed annually. https://www.veeam.com/products/veeam-data-cloud/purchasing-options.html
Veeam, Secure Cloud Storage solution brief — Archive 180-day minimum retention; archive retrieval more than 15 hours. https://www.veeam.com/solution-briefs/vdc_vault_v2_solution_brief_wp.pdf
The Register, AI blamed again as hard drives are sold out for this year, 20 February 2026 — Western Digital “pretty much sold out for calendar ’26”; Seagate nearline capacity “fully allocated through calendar year 2026.” https://www.theregister.com/on-prem/2026/02/20/ai-blamed-again-as-hard-drives-are-sold-out-for-this-year/4285453
Veeam Community, Veeam Data Cloud Vault Archive product update — built on Azure Blob Archive; no separate appliance or compute; $20 per 200 GB egressed on retrieval. https://community.veeam.com/product-updates/veeam-data-cloud-vault-archive-13804
Veeam, What’s New in Backup & Replication 13.1, Backup Repositories — Vault Archive as archive tier of a scale-out backup repository; Copy policy for GFS restore points. https://helpcenter.veeam.com/docs/vbr/wn/backup_repositories.html
Veeam, Archiver Appliances, Veeam Backup & Replication User Guide — temporary virtual machine in AWS or Microsoft Azure used for archive tier transfers. https://helpcenter.veeam.com/docs/vbr/userguide/archiver_appliance.html
Veeam, How GFS Backup to Tape Works, Veeam Backup & Replication User Guide. https://helpcenter.veeam.com/docs/vbr/userguide/gfs_to_tape_hiw.html
Seagate Technology Holdings, Q3 FY2026 earnings call, corrected transcript, 28 April 2026 (W. D. Mosley, prepared remarks) — nearline capacity “almost fully allocated through calendar 2027.” https://s24.q4cdn.com/101481333/files/doc_financials/2026/q3/CORRECTED-TRANSCRIPT_-Seagate-Technology-Holdings-Plc-STX-US-Q3-2026-Earnings-Call-28-April-2026-5_00-PM-ET.pdf
Veeam, Backup Storage Regions, Veeam Data Cloud Guide for Service Providers, Archive edition — Azure regions in Singapore, Japan, Australia, India, Indonesia, Malaysia, Hong Kong, New Zealand and South Korea, among others (page updated 6 August 2026). https://helpcenter.veeam.com/docs/vdc/provider/vault_regions.html#backup-storage-regions-for-archive-edition

The post Data doesn’t retire, it just gets cheaper to keep appeared first on Veeam Software Official Blog.