A project manager is closing out an IT project that processed customer financial records. The organization's governance framework requires that certain project artifacts be kept for seven years before disposal, while temporary working files can be deleted immediately. Which organizational policy should the project manager consult to determine how long each type of record must be preserved and when it may be destroyed?