| Usage events | Primary application database | 30 days by default | Automated retention cleanup |
| Blocked events | Primary application database | 30 days by default | Automated retention cleanup |
| Workspace audit logs | Primary application database | 180 days by default | Automated retention cleanup |
| Admin/audit IP, where captured | Audit log metadata | Same as the related audit event | Same cleanup path as audit logs |
| Proxy session records | Primary application database | Kept while needed for account/session operation unless deletion is requested and legally available | Not part of the default usage/blocked/audit cleanup path today |
| Raw gateway/API service logs | Deployment log storage | Short-term operational rotation | Deployment log rotation |
| Private App request/response bodies | Transit path, not intentional storage | Not intentionally logged or retained by BusinessProxy | Logging/redaction controls and operational review |