Proving deletion is kinda like proving a negative, I've been there. Things that may help: * A method statement (procedure) for creation and deletion. * Car

Proving deletion is kinda like proving a negative, I've been there. Things that may help: * A method statement (procedure) for creation and deletion. * Careful screenshots of the above for sensitive datasets including the 'after' state, eg trying to access old data getting an error. * Signed statements by the people doing the above that they actually did the above in good faith and had it cross-checked by someone senior. * Possibly stamp it so someone has liability if wrong.