What is a cloud recycle bin or deleted-items folder?¶
It is a temporary provider-managed state for objects removed from the live folder. It may allow restoration before expiry or purge, but it is not permanent preservation.
The visible bin may be only one layer¶
Some services use user-level and administrator recovery stages. A managed tenant may retain deleted objects after they disappear from the user's interface. Expiry periods, storage limits, administrator action and retention policy determine what remains.
A deleted-item record may preserve the object ID, original path, owner, deletion time, actor or process, versions and current purge date. Capture these relationships rather than relying only on a screenshot of the filename.
Restore and purge are new events¶
Restoration can change timestamps, permissions, location or version state and create an audit event. Purge may remove recoverable content while leaving audit or retention records. Preserve the pre-action state and record who performed any recovery.
Where relevant, check other recovery sources such as version history, backups, archives and connected devices. They may have different content and metadata.
Time matters¶
Provider and organisational rules can expire deleted data automatically. Current product defaults should not be assumed to describe the historical account or tenant configuration.
OneDrive object OBJ-8821 is removed from /Finance in event DEL-411 and appears in user recycle-bin state BIN-44 with original path, deleter C-77503 and deletion time 16:20. Administrator Priya later restores it in event RST-52 to /Recovered; that new event and destination must be preserved alongside the pre-restore state.
The next useful comparison is the captured BIN-44 record against RST-52, the restored object's ID, path, hash, timestamps, permissions and audit history.
Current Microsoft recycle-bin example - checked 3 September 2026
Microsoft currently states that personal OneDrive recycle-bin items are normally deleted after 30 days, while work or school items are normally deleted after 93 days unless an administrator changes the setting. SharePoint can expose first- and second-stage recycle bins. These are current defaults, not proof of the historical tenant's configuration.
The point to remember
Deleted items are a time-limited recovery layer with their own records. Preserve object, deletion and expiry details before restoration or policy removes the state.
