- S3 with versioning, object lock in compliance mode, and per-tenant bucket or prefix by region
- SageMaker training jobs with a model registry, artefacts versioned in S3 per tenant
- Policy-driven retention per tenant with legal hold overriding deletion, enforced by object lock