NVIDIA 
Cursor 
GitHub 
Docker 
Maven 
Finanzdienstleistungen 
Öffentlicher Sektor 
Technologie 
Gesundheitswesen 
Gaming 
Automobilbranche 
Enterprise 
Common Questions About Smart Archiving and Automated Cleanup
Everything your team needs to evaluate JFrog as your artifact lifecycle governance solution.
Artifact Retention & Lifecycle Governance for the AI Era
Meet compliance mandates, eliminate digital clutter, and keep systems performing with the JFrog Platform
Dormant Builds, Active Risks
AI-driven development is filling repositories faster than ever. Leaving dormant, unpatched builds unmanaged across your storage environments inflates costs, slows down builds, and quietly expands your attack surface.
JFrog’s artifact retention and lifecycle governance solution automatically archives regulated releases for compliance and purges unneeded artifacts to keep repositories clean, costs low and audit-ready
Take Control of the Full Artifact Lifecycle with JFrog
Eliminate storage bloat and compliance risk with JFrog’s automated artifact retention and cleanup policies
Ensure Retention Compliance
Retain governed releases with the metadata, attestations, and evidence needed for regulatory audits.
Reduce Storage Costs
Automatically archive legacy builds to immutable artifact storage to free up your primary space and cut overhead.
Boost System Performance
Purge unneeded artifacts to keep repositories lean, builds fast, and AI workflows running at full speed.
Shrink Your Attack Surface
Proactively delete dormant assets containing known CVEs to keep your production environments risk-free.
One Platform. Total Repository Control.
Securely archive required assets for compliance and instantly purge the rest with JFrog.
Smart Archiving
Automated, policy-driven artifact archiving moves required releases into governed, long-term optimized storage while preserving full context needed for audit, compliance, and restoration.
Complies with SOX, ISO, HIPAA, GDPR, and PCI DSS.- Retains binaries, metadata, permissions, and attestations.
- Control what gets archived with artifact retention policies.
- One‑click search and restore.
- Deploys anywhere: SaaS, hybrid, or self-hosted.
Automated Repository Cleanup
Automatically remove unneeded artifacts to keep your system of record clean, fast, and secure.
- Define artifactory cleanup policies by age, usage, version, or project.
- Apply cleanup policies across repositories platform-wide, not one repo at a time.
- Preview impact with dry-run simulation mode.
- Cut active storage costs and admin overhead.
- Purge dormant, unpatched assets to eliminate risk.
It's an excellent solution, and it's exactly what we were looking for from a compliance standpoint, but also from a cost standpoint.
-
JFrog Smart Archiving moves legacy artifacts you are required to retain (such as production releases subject to regulatory mandates) to governed, low-cost, immutable artifact storage, preserving full metadata, attestations, and build evidence for audit and restoration.
JFrog Automated Cleanup permanently removes artifacts that are no longer needed and have no retention requirement. Together, they give you a complete binary lifecycle management strategy: retain what you need, eliminate what you don’t.
-
Smart Archiving is designed to support long-term binary retention requirements across a range of regulatory frameworks including SOX, ISO, HIPAA, GDPR, and PCI DSS. Retained artifacts are stored with their full provenance, including metadata, permissions, and build attestations so you can demonstrate a complete, auditable chain of custody at any time.
-
Cloud storage lifecycle policies move binary blobs, but leave metadata and database entries behind in your operational instance. JFrog Smart Archiving moves the full artifact and its complete context: binaries, metadata, permissions, and attestations. The result is an operational instance that stays lean and performant, and an archive that is fully searchable and restorable in one click, with zero reconstruction effort.
-
Yes. Every artifact archived by Smart Archiving remains searchable within the JFrog Platform and can be restored to your operational Artifactory instance in a single click with its complete metadata, permissions, and build context fully intact. There is no manual reconstruction required.
-
Artifactory cleanup policies are configured by platform or project administrators based on criteria including artifact age, usage, version condition, package type, and project. Policies can be previewed in dry-run mode before execution, so you can see exactly what will be removed before any action is taken. Once activated, policies run automatically on a schedule or when criteria are met, with full audit logs of every action taken.
-
Yes. By default, removed artifacts are safely held in a global trash can for a configurable retention period set by the platform administrator, allowing files deleted by accident to be recovered. However, policies can be optionally configured to bypass the trash can for immediate deletion. Once the configured retention period expires or the trash can is bypassed, the files are permanently deleted and cannot be restored.
-
Smart Archiving is available for JFrog Enterprise and Enterprise+ customers. It is natively managed within your existing JFrog instance. No additional infrastructure, third-party integrations, or internal tooling is required.
