You need a rigorous and enforced deletion policy setup years before you get subpoenaed.