Did the auditing company attempt to recover the deleted logs from the image of the drive?
You can’t recover deleted files from the image - only from the drive itself (unless a program such as bleach bit is used to santize the actual magnetic cells).
The image includes only those bits and bytes in the registry, not those still echoed without reference on the actual hardware.