Audit trail at database level

Summary:

We had 2 question from auditors, kindly request an answer for these questions:

1)Audit Trail is retained the minimum period of 8 years?
2)Evidence related to audit trail enablement at database level to capture the direct database updates

Need this on urgent basis.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

24A

Code Snippet (add any code snippets that support your topic, if applicable):