Audit trail

The Audit trail is one of the five screens inside the Console's Settings hub. It records every change inside the organisation and who made it, newest first. It is shown to people who hold audit.read.

Audit entries are never edited and never removed. The database refuses it: the table is append-only under row-level security, with immutability triggers behind it.

There is no retention window. Nothing expires an audit row, and this site must not state a period — a number invented here would be quoted back to us as policy. The retention question is an open owner decision.

Data custody is a different screen

Data custody is its own screen in the same hub. It is a per-delivery ledger — the chain of custody for survey files handed to another organisation — and it is owner-only: it is gated on the ability to transfer ownership, which most roles do not have.

This page is being written.

What each kind of entry records, and how to read one, is not written up with screenshots yet.