Audit Trail feature is available at database

We had 2 question from auditors, kindly request an answer for these questions:

1)Audit Trail is retained the minimum period of 8 years?
2)Evidence related to audit trail enablement at database level to capture the direct database updates

3) Can we find last login date of a user.

Need this on urgent basis.