Understanding data retention

  • Last update on January 28th, 2025

Here is the list of those reports that we keep a history of and for how long.

Data retention and consultation

To facilitate the reading of the tables below, we've listed the header labels and their corresponding meanings:

Data retention

This refers to the total duration for which data is stored and remains accessible in our storage systems. Refer to the table below titled “Audit” for guidance on data retention periods.

 
 

Live search time frame

This refers to the period within which data can be accessed and consulted on-demand through the live search functionality in audits and reports on our portal. For example, in the Microsoft 365 audit report, data up to 9 months old is available on-demand via the search feature.

 
 

Support assistance time frame (available only for Audit)

This indicates the extended period during which data, even beyond the live search limit, can be accessed and consulted by requesting support from our team by opening a ticket

For instance, in the CoreView audit report, data older than 9 months and up to 7 years can be accessed through this method.

The processing time for support tickets is a maximum of 5 business days. The availability of additional logs requested through tickets on the portal will be guaranteed for at least 30 days.

 
 

Reports

Many CoreView reports lack history. The following table provides data retention information for the reports that do have history:

Category Report Data retention Live search time-frame
Mail traffic Mail traffic   6 months
Malware detail   3 months
Teams PSTNCalls   6 months
Executions Workflow executions 1 year Up to 1 year

Audit

Category Report Data retention Live search time-frame Support assistance time-frame
CoreView audit Operator activities
Audit log
7 years Up to 1 year Beyond 1 year
CoreView tasks Task Progress 1 year Up to 3 months Beyond 9 months
Microsoft 365 audit (*)  Microsoft 365
Exchange
SharePoint
OneDrive
Threat intelligence
Teams
Power BI
Security compliance center
CRM
Entra ID
Power apps
1 year Up to 9 months Beyond 9 months

(*) Exceptions for Microsoft 365 audit

Attention: There are some exceptions to the previous table:

Category Report Data retention Live search time-frame Support assistance time-frame
Entra ID audit Sign-in events
Sign-ins with admin roles
Sign-ins external
Sign-ins failed
1 year Up to 7 months Beyond 7 months
Entra ID audit Monthly sign-ins by user 1 year 1 year
Monthly sign-ins by app 1 year 1 year