Understanding data retention

  • Last update on October 21st, 2024

Here is the list of those reports that we keep a history of and for how long.

Data retention and consultation

To facilitate the reading of the tables below, we've listed the header labels and their corresponding meanings:

Data retention

This refers to the total duration for which data is stored and remains accessible in our storage systems. Refer to the table below titled “Audit” for guidance on data retention periods.

 
 

Live search time frame

This refers to the period within which data can be accessed and consulted on-demand through the live search functionality in audits and reports on our portal. For example, in the Microsoft 365 audit report, data up to 9 months old is available on-demand via the search feature.

 
 

Support assistance time frame

This indicates the extended period during which data, even beyond the live search limit, can be accessed and consulted by requesting support from our team by opening a ticket. For instance, in the CoreView audit report, data older than 9 months and up to 7 years can be accessed through this method.

 
 

Reports

Many CoreView reports lack history. The following table provides data retention information for the reports that do have history:

Category Report Data retention Live search time-frame Support assistance time-frame
Mail traffic Mail traffic   6 months  
Malware detail   3 months  
Teams PSTNCalls   6 months  
         

Audit

Category Report Data retention Live search time-frame Support assistance time-frame
CoreView audit (*) Operator activities
Audit log
7 years Up to 1 year Beyond 1 year
CoreView tasks Task Progress 1 year Up to 3 months Beyond 9 months
Microsoft 365 audit (*)  Microsoft 365
Exchange
SharePoint
OneDrive
Threat intelligence
Teams
Power BI
Security compliance center
CRM
Entra ID
Power apps
1 year Up to 9 months Beyond 9 months

(*) Exceptions

Attention: There are some exceptions to the previous table:

Category Report Data retention Live search time-frame Support assistance time-frame
Entra ID audit Sign-in events
Sign-ins with admin roles
Sign-ins external
Sign-ins failed
1 year Up to 7 months Beyond 7 months
Entra ID audit Monthly sign-ins by user 1 year 1 year
Monthly sign-ins by app 1 year 1 year