VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN
The RFPRoom Quarterly
Pinegate Software · published by uStack
RFP-2031 · Security

Q-2031-S10 — How are administrative actions logged?

Status Approved. Reviewer: Diego Ortega.

Approved answer
Approved by Diego Ortega on May 14, 2026 5:56 PM.

Every administrative action — user create/update/delete, role change, integration toggle, data export — is written to an immutable audit log with actor, resource, before/after state, and timestamp. Logs are retained for 7 years and streamable to customer SIEM via webhook or AWS Kinesis Data Firehose.

Question metadata
Category: Security
Status: Approved
Drafts: 1
Reviews: 1
Draft history (1)
Every authored version, source library link, and the snippet citations attached.
  • v1Approvedmatched LIB-SEC-010May 16, 2026 5:56 PM

    Every administrative action — user create/update/delete, role change, integration toggle, data export — is written to an immutable audit log with actor, resource, before/after state, and timestamp. Logs are retained for 7 years and streamable to customer SIEM via webhook or AWS Kinesis Data Firehose.

    Rationale: AI-matched against LIB-SEC-010; reviewed verbatim.

Reviewer decisions (1)
Sign-offs and rationale per reviewer.
  • Diego Ortegasecurity_reviewerApprovedMay 13, 2026 5:56 PM

    Verified against trust portal documentation; no changes.

Acting as Nina Vega · VP salesswitch role →