Description

Currently, when audit logs are deleted because they exceed the configured retention period in the Power Platform Admin Center (PPAC), there is no native capability to recover those deleted audit logs directly within the same environment.

As a limited workaround, recovery may only be possible if a backup still exists from a point in time before the audit logs were deleted. In that scenario, the customer can restore the source environment to a supported target environment and include audit logs during the restore process. However, this approach depends entirely on backup availability and retention. Direct restore to production is not supported.

Requested Improvement

Introduce a product capability that allows administrators to recover deleted audit logs directly within the same environment for a defined recovery window aligned to the configured audit retention policy.

For example, if an environment is configured with a 90-day audit retention period, administrators should have the option to recover deleted audit logs for up to 90 days after deletion, without requiring a full environment restore or restore to a separate sandbox environment.

This feature would give customers more control over audit data recovery, reduce dependency on backup-based workarounds, and provide a safer operational experience when audit logs are deleted unintentionally.

Business Value

This improvement would provide significant value to customers who rely on audit logs for compliance, security investigations, operational reviews, and historical traceability.

A native audit log recovery capability would:

• reduce the risk of permanent data loss when audit logs are deleted unintentionally,
• support compliance and governance requirements by improving access to historical audit evidence,
• help organizations respond more effectively to internal reviews, legal requests, and security investigations,
• eliminate the need for disruptive, time-consuming environment restore workarounds,
• reduce administrative overhead and the risk associated with restoring entire environments just to retrieve historical audit data.

Overall, this feature would improve data resilience, strengthen customer confidence in audit retention controls, and help organizations better protect business-critical audit history.