D-PDD-DY-01: Dell PowerProtect Data Domain Deploy

Data Domain Retention Lock offers two modes: Governance and Compliance. Governance mode allows authorized administrators to modify or remove retention locks before expiration, so it is not the strictest form of immutability. Compliance mode, by contrast, enforces true immutability — once a file is locked, it cannot be deleted, modified, or have its retention period shortened by anyone, including system administrators, until the retention period expires. Compliance mode is designed to meet regulatory requirements such as SEC Rule 17a-4 and requires security officer authorization to enable, making it the highest level of data immutability available on Data Domain OS.