When I worked at Capital One there was a policy of automatically deleting everything that had not been subpoenaed as soon as it was legal to delete it. Usually 3 years or so. Retaining longer was viewed as creating legal risk for future lawsuits. They didn't want to leave evidence lying around if they could help it.

Edit: We were on GSuite.