DeploymentRetention

Retention

Set per-tenant audit and session retention windows from the dashboard in production.

Configure retention

Retention is configured per tenant from the dashboard under Settings → Retention — no environment variable changes required. Defaults are 365 days for audit events and 90 days for session records. Both purge workers start automatically and run every 24 hours.

Data typeDefaultNotes
Audit events365 daysAll events older than the configured window are deleted. A chain anchor is stored before each purge.
Session records90 daysOnly expired or revoked sessions older than the configured window are deleted. Active sessions are never purged.

Change the window

To change retention, open the Settings tab in the dashboard, update either value, and click Save. A confirmation prompt appears when reducing either window — the deletion is permanent and runs on the next nightly cycle.

Environment fallback

The AUDIT_RETENTION_DAYS environment variable sets a system-wide fallback but is superseded by per-tenant settings once configured. Check current retention state and last purge anchor via GET /v1/audit/retention.