DORA requires financial entities to maintain incident logs for the duration of the service relationship, while PCI DSS v4.0 mandates a 12-month audit trail with three months immediately available. In Hydrolix, you can retain full-fidelity logs for 15 months by default using high-density compression to keep storage costs predictable.