You can also set up an Event Session.  In SSMS 2014, there is a function for this (before, you had to work your way through the scripting).  You can set custom retention periods, and also limit the output with almost any filter.  You can get all commands issued by SA, any GDR event, and command that contains certain text (such as Authorization).  Then to retreive the data, you use the function sys.fn_xe_file_target_read_file.  Here is a link to get you started with Event Sessions:

https://docs.microsoft.com/en-us/sql/relational-databases/extended-events/sql-server-extended-events-sessions

It takes a bit to get used to it  but it is well worth it.

Oh, and revoke any sysadmin permissions the developer group(s) have.  This is a crisis that should not go to waste.