# Ensure workspace audit logs are exported and retained for at least one year

- Source: https://support.icompaas.com/support/solutions/articles/a_1793876670846967-ensure-workspace-audit-logs-are-exported-and-retained-for-at-least-one-year
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Render Cloud](https://support.icompaas.com/support/solutions/c_1793875953948152) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1793875960840493)
- Last updated: 2026-11-05
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure workspace audit logs are exported at least every 90 days and stored for at least one year in a secure location, such as a SIEM or protected storage. Render keeps at least the last 90 days of audit log events, and each export can cover at most 90 days.

**Rationale**

Audit logs record logins, member changes, secret views, shell access, and changes to protected environments. Investigations often need history older than 90 days. Exporting regularly and keeping the files for a year makes sure this evidence is not lost when Render's retention period ends.

**Impact**

-   Audit history is kept for at least one year
    
-   Supports investigations and compliance audits
    
-   Exports must be scheduled and stored securely
    

**Default Value**

Render retains at least the last 90 days of audit log events. Audit logs require a Pro plan or higher, and nothing is exported automatically.

**Pre-Requisites**

-   Workspace Admin role
    
-   Pro plan or higher (Scale or Enterprise for organization audit logs)
    
-   A secure storage location
    

**Remediation**

**Test Plan**

1.  Check your storage location for audit log exports covering the last 12 months without gaps.
    
2.  Confirm the most recent export is less than 90 days old.
    
3.  If exports are missing or older than 90 days, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the Render Dashboard at [https://dashboard.render.com](https://dashboard.render.com/).
    
2.  Select your workspace from the workspace dropdown at the top of the left pane, then click Settings in the left pane to open Workspace Settings.
    
3.  Scroll down to the Compliance section.
    
4.  Under Audit Logs, select a start and end date (at most 90 days), then click Export as CSV.
    
5.  Store the CSV in your secure storage location and keep it for at least one year.
    
6.  To automate this, call the Render API's List workspace audit logs endpoint on a schedule (for example monthly) and send the results to your SIEM.
    

**Backout Plan**

1.  Stop the scheduled export job if needed. Exported files can be deleted from storage according to your retention policy.
    

**Reference**

-   [https://render.com/docs/audit-logs](https://render.com/docs/audit-logs)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.