revolgy+Vega
Security data retention

Your retention window came from an invoice.

Two pages, five questions and one line of arithmetic. Swap the number your SIEM invoice picked for one you can defend to a supervisor, an insurer or a court.

InvoiceLEGACY SIEM
Ingestionper GB
Hot storageper GB
Retention30 days
Day 31not retained
Day 180not retained
Day 365not retained

Up to 82% lower cost than legacy SIEM, according to Vega.

Worksheet cover
WORKSHEET · 2 PAGESRetention derivation worksheet

Inside the worksheet · 2 pages

Derive a window you can defend.

Work out a retention period from your risk assessment instead of your contract, and see what it costs in your own storage.

01Five questionsPer source, per decision, per attestation. Including the one about what you told your insurer.
02The arithmeticYour daily volume and the window you would pick on risk, set against list prices for object storage and SIEM.
03What the market showsClaim denials, premiums, forensic costs and default audit windows, from public sources you can check.
The problem

Nobody picked 30 days. The per-gigabyte price did.

Neither NIS2 nor DORA sets a retention period. Both expect you to explain how you decided yours. The questions that test it tend to arrive after day 30.

The supervisorHow did you set this period?
The insurerShow us logs from the start of the incident.
Your IR leadWhen did they actually get in?
The Hive Advantage

Why twelve months stops being expensive.

Vega leaves your security data in your own object storage and searches it where it sits. No ingestion fees and no duplicate storage, so each extra month costs what storage costs.

M01
M02
M03
M04
M05
M06
M07
M08
M09
M10
M11
M12
12 months in the hive
One-to-one with an expert

30 minutes. Your data, your numbers.

Bring your daily volume. We derive the window from your risk assessment and price twelve months in your own object storage.

Book a 1:1 →
Live webinar · 60 min

Who set your retention window?

The same investigation, run twice: once the usual way, once in Vega, with a timer on screen. Then what a managed security service changes for you: less hiring, faster detection, and the evidence auditors and regulators ask for under DORA, NIS2, SOC 2 and ISO 27001, at lower cost than running a SIEM in-house.

OCT30
Friday, 30 October12:00–13:00 UK · 13:00–14:00 CET
Marko KirschnerVega
Marius-Florin Cristian, CISSPCloud Security Lead, revolgy
Save my seat →
revolgy+Vega
revolgy is a Google Cloud Premier Partner and a Vega partner.
© 2026 Revolgy. All rights reserved.