Who saw what, six months later

An audit trail listing views and edits by user

Nobody asks for an audit trail during the sale. They ask for it during a dispute, or the week a customer’s legal team wants to know how their data was handled, and by then it either exists or it does not.

Views count as well as edits

An edit log answers half the question. The half that matters in a dispute is often who read a record and when — which contractor opened which account in the fortnight before they left.

It cannot be edited from the inside

The trail is append-only, and that includes for administrators. An audit log an administrator can tidy up is a log that proves nothing, which rather defeats the purpose of keeping one.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *