Neither SOC 2 nor ISO 27001 mandates a specific log retention period, but both require organizations to define a period based on their own risk assessment, and audits will typically press for the queryability of 90 days to 1 year of history.