Set how long audit events are kept (365 to 3,650 days).

Organization admins only (403 organization_admin_required), on a browser session with a fresh proof in the x-50h-reauth header (401 reauth_required). It needs a person: API keys, connected apps and service accounts get 403 session_required. Every change is written to the organization's audit. A daily job deletes events older than the period, except those a legal hold covers. Once set, the period applies to the workspace logs too. 50heads keeps its own records (payments, payouts, fraud checks) for as long as it must, whatever is set here.