Status Approved. Reviewer: Diego Ortega.
Every administrative action — user create/update/delete, role change, integration toggle, data export — is written to an immutable audit log with actor, resource, before/after state, and timestamp. Logs are retained for 7 years and streamable to customer SIEM via webhook or AWS Kinesis Data Firehose.
Every administrative action — user create/update/delete, role change, integration toggle, data export — is written to an immutable audit log with actor, resource, before/after state, and timestamp. Logs are retained for 7 years and streamable to customer SIEM via webhook or AWS Kinesis Data Firehose.
Rationale: AI-matched against LIB-SEC-010; reviewed verbatim.
Verified against trust portal documentation; no changes.