diff --git a/internal/api/retention_handlers.go b/internal/api/retention_handlers.go
index f8c46f1..d959eff 100644
--- a/internal/api/retention_handlers.go
+++ b/internal/api/retention_handlers.go
@@ -2,8 +2,11 @@ package api
 
 import (
 	"encoding/json"
+	"fmt"
 	"net/http"
 	"strconv"
+
+	"github.com/archivmail/internal/audit"
 )
 
 // handlePurge deletes all mails whose retention period has expired.
@@ -56,11 +59,14 @@ func (s *Server) handleSetTenantRetention(w http.ResponseWriter, r *http.Request
 		return
 	}
 
-	sess := getSession(r)
+	sess := sessionFromCtx(r.Context())
 	if s.audlog != nil {
-		_ = s.audlog.Log(r.Context(), sess.UserID, "tenant_retention_changed", map[string]interface{}{
-			"tenant_id":     tenantID,
-			"retention_days": body.RetentionDays,
+		s.audlog.Log(audit.Entry{
+			EventType: "tenant_retention_changed",
+			Username:  sess.Username,
+			IPAddress: s.remoteIP(r),
+			Success:   true,
+			Detail:    fmt.Sprintf("tenant_id=%d retention_days=%d", tenantID, body.RetentionDays),
 		})
 	}