Ghost Data

Finds the personal data a deletion missed in versioned S3 buckets.

In a versioned S3 bucket, a delete only adds a delete marker and the old version keeps every byte. Ghost Data is a deletion-audit agent on Amazon Bedrock. It reads every version, and code decides a copy exists only when the identifier is in the bytes S3 returned. It runs as a read-only IAM role, and CloudTrail records each read under the case. On 29 synthetic customers in a live bucket, adding the S3 tool took false COMPLETE verdicts from 16 to 0 and found 19 of 19 surviving copies.