Key events (sign-ins, plan and billing changes, password changes, moderation and every Super Admin action) are kept for 365 days with before/after values. The request trail records only that a write happened and which fields it carried, never their values, and is kept for 90 days. Secrets are redacted before storage.