Yandex 360 Email Archive Documentation Shows Search Snapshots and Former Employee Log Filters

The Yandex 360 administrator guide describes the email archive as a tool that stores copies of all messages sent and received by employees on the organization's domain. Two specific statements in the documentation indicate that each saved search returns a static snapshot that does not update automatically when new mail arrives, requiring manual cloning or recreation of the search to obtain current results. The same documentation states that the action log records every operation performed in the archive, yet the employee filter in the log interface only displays currently active accounts, making it impossible to select a former administrator by name. API 360 currently provides no documented endpoints for creating, executing, or retrieving archive searches, leaving all operations dependent on the web console. Additional notes clarify that messages remain available after an account is blocked but disappear once the account is deleted, and that messages removed before the archive was enabled cannot be recovered. These documented behaviors directly affect incident response and offboarding procedures that rely on historical email retrieval and audit trails.

HabrTranslated from Russian

Read at source

The Yandex 360 administrator documentation defines the email archive as a feature that preserves copies of every message sent or received by employees whose mailboxes belong to the organization's domain. Once enabled, the archive continues to retain messages even if the original owner deletes them from their mailbox. The guide explicitly warns that messages deleted before the archive was turned on cannot be restored.

Search functionality is implemented as named objects rather than live queries. The documentation states: “Each search runs once. The results do not update as employees send and receive new messages.” Administrators must either create a new search with identical parameters or use the “Clone search” button and adjust the date range to obtain fresh results. No method exists in the documented Yandex 360 API to automate this process.

The action log records every interaction with the archive and promises that “you can always see who searched for what.” However, the employee filter only lists active accounts. The documentation advises that if an administrator has left the organization, their actions cannot be selected by name in the filter and other criteria such as event type and time period must be used instead.

Additional constraints listed in the FAQ section include the permanent loss of messages belonging to fully deleted accounts and the exclusion of any mail from mailboxes that were imported rather than created on the organization's domain. These documented limitations affect routine tasks such as retrieving correspondence of a departed employee or reconstructing an audit trail after an administrator departure.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Policy & Regulation

Russian Minister Proposes Blocking All SIM Cards Linked to Fraudsters Banned in MAX Messenger
Russia Ready to Disclose Source Code of Social Networks, Messengers and AI Models
Russia Mulls Mandatory Two-Week IMEI Registration for Foreign Smartphones via Gosuslugi