LIB-SEC-010 — How are administrative actions logged?

Every administrative action — user create/update/delete, role change, integration toggle, data export — is written to an immutable audit log with actor, resource, before/after state, and timestamp. Logs are retained for 7 years and streamable to customer SIEM via webhook or AWS Kinesis Data Firehose.

Category

Security

Status

Approved

Freshness

Aging

Freshness policy

12 months

Last reviewed

Dec 16, 2025

Author

Rachel Murphy

Reuse count

16

Times drafted from

1