Last updated 5/27/25.
At Turngate, we’re all about making your audit data more transparent and useful to you and the rest of your organization. Despite being a security professional, having access to audit data from your vendors is not guaranteed. Some vendors even make you pay extra for it (just like some vendors make you pay extra for SSO). Even if you do have access to your vendor’s logs, finding out how to get access—and how long they hold the data for you—can be a challenge in its own right. Wouldn’t it be great if someone did the work on assembling SaaS log data retention timelines for you?
In the same vein as one of our favorite reference documents from SSO.tax, Turngate has done the heavy lifting on log retention terms for popular vendor audit records. We compiled this list combining internet research and personal outreach to vendor support teams so that you can focus on the rest of your job, and not spend time looking (or calling around) for it.
Why is it so hard to find this data?
Would you be surprised to hear that it wasn’t easy finding all this information? Some vendors were strangely cagey about sharing this data, which seems… not great—or at least, not transparent. It’s your audit data, so it should be as easy to access the retention periods as the service itself…but we digress.
Without further ado, the table below contains what we’ve uncovered so far. We’ll be updating this list periodically, so bookmark it and set a reminder to check back on our changes. Also, if there are vendors you think would be useful to the community to add to this list, let us know – we’ll use your contact info only for communicating with you on our research.
The Ultimate List of SaaS Log Data Retention Timelines
| Data Source |
Default Retention Term |
Need to Opt-In? |
Can You Buy a Longer Term? |
Required License |
Useful Links |
Last Updated |
| 1Password |
365 days |
No |
No |
1 Password Business |
Activity Log |
1/2/25 |
| Adobe |
90 Days |
- |
- |
Teams or Enterprise |
Content Logs |
5/22/25 |
| Asana |
90 days |
No |
No |
Enterprise+ |
Audit Log Events |
5/15/25 |
| Box |
Indefinite |
No |
No |
Business Plus/Enterprise |
Tracking User Activity |
8/1/24 |
| Datadog |
3 Days |
Yes |
Yes - 30 Days+ |
Log Management and Audit Trail are Seperate Products |
Log Management
Audit Trail |
- |
| Dropbox |
File History - 30, 180, 365 Days
Team Activity - Unspecified |
No |
Yes |
File History - Any Dropbox User
Team Activity - Dropbox Standard, Business, Advanced, Business Plus, and Enterprise
Legal Holds, Data Retention Policies, and Extended File History - Governance Add-on |
View Team Activity
File Versions History
Data Governance Add-on |
5/22/25 |
| Duo Security |
180 days |
No |
No |
Any |
Admin API |
5/15/25 |
| Figma |
- |
- |
- |
Organization or Enterprise |
View and Export Activity Logs |
- |
| GitHub |
180 Days |
No |
No |
Enterprise |
Monitoring Activity in Your Enterprise |
2025 |
| Google Workspace |
Most Events - 6 Months
Some Events as short as 30, some indefinetely |
Yes - Enable Google Workspace to Share Data with Google Cloud |
No |
Cloud Identity, Cloud Identity Premium, and all Google Workspace Customers |
Audit Logs for Google Workspace
View and manage audit logs for Google Workspace
Data Retention and Lag Times
Regulatory Compliance Security Whitepaper |
6/26/24 |
| Hubspot |
1 Year (Some reports go back only 90 days) |
No |
No |
None
Enterprise - can export a Centralized Audit Log |
View and Export Account Activity History |
2/11/25 |
| Intuit |
2 Years |
- |
- |
No
QuickBooks Online Advanced - Can Create Own Reports with Custom Report Builder |
Use the Audit Log in Quickbook Online
Review App Audit Logs (Developer) |
4/22/25-ish |
| Jira / Atlassian |
Jira Cloud - 180 days.
Jira Server/Data Center - Configurable 10MM record limit.
Confluence - database retention is limited by the retention period, with a maximum of 10MM records. |
No |
No |
Any |
Auditing in Jira
Audit Log Capacity |
4/8/25 |
| Linear |
90 Days |
- |
- |
Enterprise |
Audit Logs |
- |
| Microsoft 365 |
Exchange Online, SharePoint, OneDrive, and Microsoft Entra - 1 Year
Can be extended to 10 years with add-on
Non-E5 Users and All Other Activity - 180 Days |
No |
Yes |
Any – E5 gets longer retention |
Manage Log Audit
Syskit Article on 365 Audit Logs/ |
5/16/25 |
| Monday.com |
Indefinite |
No |
No |
Enterprise |
The Audit Log
Audit Log Api |
5/20/25 |
| Notion |
Indefinite
(Events are only recorded starting from the time of upgrade to Enterprise) |
No |
No |
Enterprise |
Audit Log |
2/26/25 |
| Okta |
90 days |
No |
No |
Any |
Systems Log
Data Retention Policy
Audit Events Integration with Okta System Log (Early Access) |
2025 |
| Salesforce |
Indefinite |
No |
Yes |
Basic logging included with Classic and Lightning Experience.
Requires Salesforce Shield or Salesforce Event Monitoring add-on subscriptions for Enterprise, Performance, and Unlimited editions
|
Audit Trail Retention
Real Time Event Monitoring |
2025 |
| Slack |
Indefinite |
- |
- |
Enterprise Grid |
Monitoring Audit Logs (Old Dev Docs)
Audit Logs API (New Dev Docs) |
2025 |
| Workday |
30 days |
Yes (select the Enable User Activity Logging option on the Edit Tenant Setup - System task) |
No |
Any |
Activity Logging |
2/26/25 |
| Zendesk |
- |
- |
- |
Enterprise |
Audit Logs
Viewing Audit Log for Changes to your Account |
5/21/25 |
| Zoom |
Meeting Logs - 180
Operations Logs - Indefinite |
- |
- |
Pro, Business, Education, or Enterprise |
Zoom Video Communications Cloud Security Principles |
9/17/20 |
Everything important, all in one place
Or, if you’d like to not think about these problems at all, Turngate thinks we have a pretty nifty solution that aggregates the audit records for you. If you want to try it, you can hook up one SaaS vendor by yourself for free and see what kind of clarity we provide. Or, if you want to try the full product with your suite of SaaS products, ping our sales team and we’ll get you set up with a full trial.
