SentinelOne provides cost-effective storage of 12 months hot and 18 months cold across EDR telemetry and third-party data sources, aligning with OMB M-21-31 requirements.