> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domino.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Project file storage

> Project files live at rest in the Domino Blob Store, versioned as a new revision on every sync, and removable only by a system administrator performing a full delete.

At rest, [Project files](/cloud/platform-capabilities/core-concepts/projects) live in a durable object storage system, the Domino Blob Store.

Domino natively supports the Domino File Store with the following cloud storage services:

* Amazon S3

* Azure File Storage

* Google Cloud Storage

The Domino File Store can also be backed with a shared Kubernetes Persistent Volume from a compatible storage class. You can provide a Network File System (NFS) storage service, and the Domino installation utilities can deploy the [nfs-client-provisioner](https://github.com/kubernetes-retired/external-storage/tree/master/nfs-client) and configure a compatible storage class backed by the NFS system.

## Encrypted Project files

Domino supports server-side encryption with customer-provided keys ([SSE-C](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html)) for Amazon S3, and [EBS file system encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html) using the industry-standard AES-256 algorithm on Elastic Block Store.

Domino also supports default encryption keys for Amazon S3, Azure File Storage, and Google Cloud Filestore.

Domino does not provide pre-write encryption for `nfs-client-provisioner` volumes.

## How data is stored in Project files

When a user starts an [execution](/cloud/platform-capabilities/core-concepts/jobs), the files from their Project are fetched from the Domino File Store and loaded into the working directory of the [Domino File System](/cloud/platform-capabilities/core-concepts/projects/dfs-projects#the-working-directory). When the execution finishes, or the user starts a manual [sync](/cloud/platform-capabilities/core-concepts/workspaces/sync-changes-in-a-workspace) in a [Workspace session](/cloud/platform-capabilities/core-concepts/workspaces/launch-a-workspace), any changes to the working directory are written back as a new revision of the Project files. Domino's versioning system tracks file-level changes and provides [rich file difference information](/cloud/platform-capabilities/core-concepts/projects/dfs-projects#compare-file-revisions) between revisions.

Any of the following creates a new revision:

* A user uploads files from the Domino application upload interface.

* A user authors or edits a file in the Domino web application file editor.

* A user syncs local files to Domino from the [Domino Command Line Interface](/cloud/reference/cli/install-the-cli).

* A user uploads files to Domino through the [Domino API](/cloud/reference/api).

* A user runs code in a [Job](/cloud/platform-capabilities/core-concepts/jobs) that writes files to the working directory.

* A user writes files to the working directory during a [Workspace session](/cloud/platform-capabilities/core-concepts/workspaces), then starts a manual sync or commits those files when the session finishes.

Project files are a component of the Domino Reproducibility Engine, so by default Domino keeps every revision indefinitely. Users can always return to and work with past revisions, except for files subjected to a [full delete](#delete-every-instance-of-a-file) by a system administrator.

### Access to data in Project files

Users can read and write files in the Projects they create, on which they automatically hold an Owner role. Owners can add collaborators with roles and associated file permissions. See [Collaborator permissions](/cloud/platform-capabilities/core-concepts/projects/collaborate-on-projects#collaborator-permissions) for details.

Users can also inherit roles from membership in [organizations](/cloud/platform-capabilities/features/collaboration/manage-organizations). Some administrative system roles grant additional access to Project files across the deployment they administer. See [Roles](/cloud/admin/identity-and-access/manage-users/roles) for more information.

## Delete every instance of a file

A system administrator can use a full delete to remove all instances of a file's contents from the Domino File System. It finds the contents across every revision of every Project, erases them, and replaces them with a message you supply. Use it when a file holds data that must be destroyed, for example for compliance reasons.

<Warning>
  A full delete irrevocably removes every file matching the exact *contents* of the file you delete, even where the filenames differ. If several Projects contain a `data.txt` file with identical contents, full-deleting it in one Project deletes it in all of them. Files that share the filename but not the contents are unaffected.
</Warning>

1. In the Project that the file belongs to, click **Code**.

2. Click the three dots at the end of the file's row and click **Full Delete**, or click the file and then click **Full Delete**.

   <Note>
     You can perform a full delete on one file at a time.
   </Note>

3. Enter a commit message and confirm. Anyone who later opens the deleted file finds that message in place of the contents.

The operation leaves the revision history of the affected Projects intact: every commit that contained the file contents still exists, and only the contents are replaced.

<Warning>
  Domino endpoints published from Project revisions that contained a fully deleted file still carry that file inside their images, and those images cannot be purged. Contact [Domino Support](mailto:support@dominodatalab.com) if you have questions about such files.
</Warning>

## Related

* [Permanent deletion](/cloud/platform-capabilities/core-concepts/reproducibility/permanent-deletion) is the practitioner-facing view of a full delete.

* [Application logs](/cloud/admin/operations/audit-logs/application-logs) record Project file activity.


## Related topics

- [Encryption & data security](/cloud/admin/security-and-compliance/encryption-data-security.md)
- [Manage data](/cloud/admin/data-administration/index.md)
- [Manage persistent volumes](/cloud/admin/infrastructure-and-compute/manage-compute-resources/manage-persistent-volumes.md)
- [Manage External Data Volumes](/cloud/admin/data-administration/external-data/external-data-volumes/index.md)