Right to erasure across every data store

A user exercises their right to erasure. Their data is in the primary Postgres database, a search index, an analytics warehouse, a recommendation model trained last week, object storage for uploads, a third-party email provider, application logs, and nightly backups retained for 35 days. You must respond within 30 days. Design the deletion pipeline. Cover how you find every copy, what "deleted" means for backups and for a trained model, how you prove completion to a regulator, and how you avoid deleting records another user still has a legitimate claim to, such as a shared invoice.