Trash and recovery

Deleting a cluster is a soft delete — it sits in the trash for 30 days and can be restored. Individual boards keep version snapshots you can look through and roll back to. If something goes badly wrong, workspace recovery rewinds every board in the workspace to a chosen moment, with a preview of exactly what would change before anything happens.

Updated August 8, 2026

Four layers, from smallest mistake to worst day.

Undo

⌘Z. Per-session and per-board, covering your own edits.

It deliberately does not revert a collaborator's changes. In a shared board, an undo that silently reversed someone else's work would be worse than no undo. Deletions also show a toast with an undo button.

Trash

Deleting a cluster is a soft delete. It goes to the workspace trash and stays restorable for 30 days, then is purged.

The trash is workspace-wide — open it from the sidebar or ⌘K → "trash". From there, restore puts a cluster back where it was, or remove permanently if you are sure.

Version history

Boards keep snapshots over time. You can list them, look through them, and roll back to one.

This is the tool for "the board was right yesterday and is wrong now", including when the change was someone else's.

Workspace recovery

The heavy one, for when something has gone wrong across many boards at once — a bad bulk operation, or an integration that misbehaved.

1. Pick a target moment
2. Review the impact preview — every board that would change, and how
3. Confirm

The preview step is the point. A rewind is atomic across the workspace, so seeing exactly what it would do before it does it is not optional.

Open it from an alert banner, or from the workspace menu.

Anomaly alerts

An unusual number of deletions in a short window raises an alert banner in the workspace, unacknowledged until someone looks at it. The alert links straight into recovery with that moment pre-selected as the target.

This exists because the failure mode that actually hurts is not a single wrong delete — it is a bulk deletion nobody notices for three weeks, by which point the 30-day trash window is closing.

Files

Deleting a card does not immediately destroy the underlying file. Files remain protected while any board still references them, and become eligible for cleanup only after nothing does. Restoring a board within the trash window restores its images intact.

See Data and privacy for retention and deletion in full.

Machine-readable: /docs/clusters/trash-and-recovery.md · /llms.txt