Zero retention is a data-handling model in which a service processes information without keeping it after the task is complete. In practice, that means prompts, uploads, or outputs are not stored for later use, except where the product, contract, or law creates limits or exceptions.
In cyber security, zero retention can reduce the amount of sensitive data exposed if a provider is breached, subpoenaed, or later misused for training or analytics. It is often discussed for cloud and AI services where organizations want lower persistence of secrets, customer data, or incident-response material. But zero retention is not the same as no risk: logs, backups, metadata, caching, and legal obligations may still preserve some information. Defenders should verify the exact retention scope, review subprocessors, and test whether the service truly supports secure deletion and short-lived processing.