Does Gmail Keep Deleted Emails Forever? Here's What Actually Happens

No. Gmail and Google Workspace hold deleted emails in Trash for 30 days, then permanently delete them — with no recovery option, even for the account admin. If a message was deleted more than a month ago and you haven't got Google Vault or a separate archive running, it's gone.

This surfaces at the worst possible moment. A former client disputes advice given eighteen months ago and your principal asks for "the full email trail." A regulator's information request lands with a three-year lookback window. A staff member leaves and, three months later, you discover their sent items were the only record of a fee agreement. In each case, someone assumes Gmail has been quietly keeping everything. It hasn't.

What the retention obligations actually say

For Australian law firms, the professional conduct rules require client file retention — typically seven years from matter closure under state-based trust account and practice rules (NSW Legal Profession Uniform Law, for example). For accounting practices, the Corporations Act 2001 (Cth) s 286 requires financial records be kept for seven years, and email correspondence that documents advice or instructions falls within "records that explain transactions." Financial advisers face ASIC Regulatory Guide obligations layered on top of the Corporations Act, often with tighter practical expectations given the advice-disputes history in that sector.

In the UK, solicitors regulated by the SRA must retain client files per the SRA Standards and Regulations — commonly six years, longer for specific matter types — and firms handling regulated financial advice face FCA record-keeping rules (SYSC 9) requiring retrieval of client communications on request. Under UK GDPR and the Australian Privacy Act, retention itself isn't the only issue: firms also need to be able to locate and produce specific personal data on request, which is a search problem, not just a storage one.

None of these rules say "keep everything in Gmail." They say the firm must be able to produce the correspondence, complete and unaltered, for the full retention period. Whether that lives in Gmail, a PST file, or a dedicated archive is up to the firm — but the obligation doesn't lapse because the inbox emptied out.

What most small firms actually do

The honest picture: most practices under twenty people have no formal email retention process. Sent and received mail sits in Gmail until someone runs out of storage or does a clean-up, at which point old threads get deleted, archived to a personal folder, or left in Trash where they'll auto-purge in a month. A few firms export to PST files periodically — usually after a scare, rarely on a schedule, and rarely tested for whether the export actually opens two years later. "It's all in Gmail, we've never had a problem" is the most common answer, and it's true right up until a matter needs email evidence from outside the 30-day Trash window and it turns out nobody exported anything.

This works — until it doesn't. The gap doesn't show up in day-to-day work. It shows up during a dispute, an audit, or a departure, which is exactly when there's no time to fix it.

What good looks like

An audit-ready email archive has a handful of specific characteristics that basic Gmail, even with Trash left untouched, doesn't provide:

Continuous, automatic capture. Every message — sent and received — is copied to the archive as it happens, not on a schedule someone has to remember to run. Sent mail matters as much as received: it's usually the firm's own advice and instructions that get scrutinised in a dispute.

Tamper-evident storage. The archive needs to demonstrate that a message hasn't been altered after capture. This matters for evidentiary weight in a dispute or regulator request — "we have a copy" is weaker than "we have a copy that can be shown not to have changed."

Full metadata preservation. Headers, timestamps, delivery status, and attachments intact — not just the message body pasted into a document.

Fast, targeted retrieval. When a regulator or opposing counsel asks for "all correspondence with Client X between March and June 2023," you need to produce that in hours, not days of manually searching old accounts and PST files.

This is where Google Vault fits in — and where it falls short. Vault is Google Workspace's built-in eDiscovery and retention tool. It can hold mail beyond Gmail's normal retention, apply litigation holds, and support search across an organisation. But Vault has real limits for smaller firms: it requires Workspace Enterprise or add-on licensing that many small practices don't have, its retention rules are set at the admin level and are easy to misconfigure, and it's built for legal hold and discovery workflows, not day-to-day retrieval by a practice manager. It's also entirely dependent on staying inside the Google ecosystem — if you ever migrate platforms, Vault data doesn't travel with you cleanly. Vault is a genuine tool, not a marketing checkbox, but it's a discovery system bolted onto Gmail, not a purpose-built archive.

This is the gap AutoArchive Mail is built for: continuous capture of every mailbox in the firm, sent and received, stored independently of Gmail's retention settings, with full-text search and export built for a practice manager to use without an IT ticket.

The practical path forward

Start today: check your Google Workspace admin console for whether Vault is even enabled, and if it is, check the retention rules actually match your regulatory obligation — many firms have Vault switched on with default settings that don't reflect a seven-year requirement. That's a 30-minute check.

Next, audit what's actually recoverable right now: can you produce every email to and from a specific client for the last three years, today, without asking IT to dig through PST files? If the honest answer is no, that's the gap to close.

For firms under ten people with under three years of live exposure and no active disputes, Vault correctly configured plus a disciplined no-delete policy may be genuinely adequate — don't buy more than you need. For firms with longer retention obligations, higher matter volumes, or any history of disputes or regulator contact, a dedicated archive running independently of Gmail is worth setting up before you need it, not after. You can Start Free Trial to see what continuous capture looks like without changing how staff use Gmail day to day.

This article covers email retention specifically — it doesn't address retention obligations for other communication channels like SMS, WhatsApp, or Teams, which increasingly fall under the same regulatory scrutiny and need their own answer.

← Back to all articles