Security events are retained in the database for audit and compliance purposes. The retention period can be configured based on your organizational policies and regulatory requirements.