Backblaze is too shy to give a hard number. When you really don't know, start with 90 days minimum. Then go do proper risk analysis and ask legal how long they need to keep everything.