Data Retention of Google Meet Audit Log for more than 6 months

[williamschroede]

Working in healthcare, it's vital for us to have audit logs of client sessions that support our data retention requirements for HIPAA. We are required to keep client data for 7 years post session date in Texas and this goes up to 10 ye.... This issue comes up in court subpoenas for records and it comes up in litigation around contested charges. If audit logs are only kept for 6 months, if a client disputes a charge for an online session, it's only our word against theirs. If it comes up in litigation, there is to audit trail. This would be a valuable feature to add to Vault by default.

[icrew]

I’m not hugely familiar with it, but according to https://cloud.google.com/logging/docs/audit/configure-gsuite-audit-logs it appears that it’s possible to route your Workspace audit logs to Google Cloud, and retain them for longer there…

Hope that helps, at least a little,

Ian

[williamschroede]

I am going to try this. I wish I could set it for 7-10 years though.

[KAM]

@williamschroede , yes, you can export to BQ.  Ssee https://support.google.com/a/answer/9079365?hl=en and note the Enterprise SKU requirement.

There are also some features in tools like BetterCloud where it copies your logs to one central location too.

If anyone is interested in BQ, I'm doing a webinar on the accelerator we have, Dito's | BigQuery | inaBOX and attendees get free $500 credit to use on BQ and some free engineering time.  It's pretty good meeting swag 🙂

Regards,
KAM