Audit & Retention
Owlpane applies retention as rolling windows. Three dimensions are configured separately, so you can keep telemetry for a week while keeping the audit log for a year. Configure audit retention and export under Settings → Workspace security (/settings/workspace-security).
The three retention dimensions
| Dimension | What it covers | How it is set |
|---|---|---|
| Telemetry retention | Metrics, traces, and logs | Follows the plan's configured retention. |
| Replay retention | Browser session-replay timelines | Set per project, up to your plan's replay cap. |
| Audit retention | Workspace audit events (who did what) | Set on Workspace security, up to your plan's cap. |
Telemetry retention
Metric, trace, and log retention follows the plan's configured retention. Once telemetry ages out of the window it is deleted automatically and is not recoverable.
Replay retention
Session-replay retention is a per-project setting: open Settings → Projects, expand a project, and set Session replay retention (days). The value cannot exceed your plan's cap:
| Plan | Replay retention cap |
|---|---|
| Starter | 7 days |
| Team | 30 days |
| Scale / Enterprise | 90 days |
Replay retention applies to the browser session timeline (not to DOM video). See Projects & Keys for the project settings that hold it.
Audit retention
Audit events record workspace changes — invites, role changes, project and key creation and revocation, plan changes, and similar activity. Set how long they are kept on Settings → Workspace security; only an owner can change it, and older events are deleted automatically each night.
| Plan | Audit retention cap |
|---|---|
| Starter | 30 days |
| Team | 365 days |
| Scale / Enterprise | Unlimited (never above 3,650 days) |
Export audit events you need to keep beyond the retention window — see below.
Which plans can export audit logs
Audit-log export is available on Scale and Enterprise. On lower plans, audit events are visible in the workspace activity feed and are subject to the plan's retention cap, but they cannot be exported.
On Settings → Workspace security, owners can export the audit log to CSV for a chosen date range. Export your records before they age out of the retention window; use the date range fields to bound the export.
What the audit log records
Audit events capture workspace changes, including:
- Workspace — created, renamed, and plan changed.
- Membership — invite sent, invite withdrawn, member joined, member left, member removed, role changed, and namespace limits changed.
- Projects and keys — project created, key created, and key revoked.
- Security — security findings suppressed and suppressions revoked.
Each event records the actor, the action, and a timestamp. Owners and admins see the same activity in the feed on the members page — see Members & Roles.
Related controls on Workspace security
- Two-step verification — owners can require every member to use an authenticator app or passkey.
- SSO routing and enforcement — Scale and Enterprise; see SSO & Provisioning.
- Workspace export and deletion — owners can download workspace records, and delete the workspace permanently.
Compliance notes
- Retention windows are rolling and automatic; deleting data ahead of the window is not available on every dimension.
- Audit retention is capped at 3,650 days even where a plan has no limit.
- Because audit export requires Scale or Enterprise, plan for it before you need it — see Plans & Billing.
Related
- Quotas & Limits — the full plan/limits matrix.
- Members & Roles — the activity feed and who can change settings.
- Projects & Keys — per-project replay retention.
Last updated
Quotas & Limits
The plan/limits matrix for monthly ingest, project caps, retention, and Carbon windows, plus the feature gates and what happens when a limit is reached.
Reference
Exhaustive lookup tables for Owlpane environment variables, the OTLP ingest contract, the Kubernetes agent Helm values, and the control-plane API.