Here is the list of those reports that we keep a history of and for how long.
Data retention and consultation
To facilitate the reading of the tables below, we've listed the header labels and their corresponding meanings:
Data retention
This refers to the total duration for which data is stored and remains accessible in our storage systems. For instance, data for the CoreView audit report is stored for a span of 7 years.
Live search time frame
This refers to the period within which data can be accessed and consulted on-demand through the live search functionality in audits and reports on our portal. For example, in the Microsoft 365 audit report, data up to 9 months old is available on-demand via the search feature.
Support assistance time frame
This indicates the extended period during which data, even beyond the live search limit, can be accessed and consulted by requesting support from our team by opening a ticket. For instance, in the CoreView audit report, data older than 9 months and up to 7 years can be accessed through this method.
Reports
Many CoreView reports lack history. The following table provides data retention information for the reports that do have history:
| Category | Report | Data retention | Live search time-frame | Support assistance time-frame |
|---|---|---|---|---|
| Mail traffic | Mail traffic | 6 months | ||
| Malware detail | 3 months | |||
| Teams | PSTNCalls | 6 months | ||
Audit
| Category | Report | Data retention | Live search time-frame | Support assistance time-frame |
|---|---|---|---|---|
| CoreView audit (*) | Operator activities Audit log |
7 years | Up to 1 year | Beyond 1 year |
| Microsoft 365 audit (*) | Microsoft 365 Exchange SharePoint OneDrive Threat intelligence Teams Power BI Security compliance center CRM Azure AD Power apps |
1 year | Up to 9 months | Beyond 9 months |
(*) Exceptions
Attention: There are some exceptions to the previous table:
| Category | Report | Data retention | Live search time-frame | Support assistance time-frame |
|---|---|---|---|---|
| Azure AD audit | Sign-in events Sign-ins with admin roles Sign-ins external Sign-ins failed |
1 year | Up to 7 months | Beyond 7 months |
| Azure AD audit | Monthly sign-ins by user | 1 year | 1 year | – |
| Monthly sign-ins by app | Unlimited | Unlimited | – |