Compliance2026-09-04 · 5 min read
SOC 2 Log Retention: How Long Should You Keep Logs?
SOC 2 sets no fixed log retention period. What auditors actually look for, why a 12-month policy is common, and how edge logs fit your evidence.
SOC 2 sets no fixed log retention period. What auditors actually look for, why a 12-month policy is common, and how edge logs fit your evidence.
Calculate your Cloudflare cache hit ratio per day from the GraphQL API, spot regressions after deploys, and keep the trend beyond the retention window.
Self-hosting Elasticsearch for Cloudflare logs means owning shards, index lifecycle, upgrades, and disks. What the ELK route really costs a small team.