Knowledge base/Firm, security and compliance

The audit log: every search, view and export

3 MIN READ·UPDATED NOV 2026·FIRM, SECURITY AND COMPLIANCE

Every sign-in, search (with its purpose), view, upload, download, export, review and settings change is written to a tamper-evident log. Rows can never be edited or deleted.

Read it

Open Audit log. The counters show searches this month and how many carried a recorded purpose, active users and how many have two-step sign-in, the retention rule and the encryption in use. Filter by user or action.

The audit log with counters and the chained entries

Tamper-evident

Each entry carries a hash of itself and of the entry before it. Verify chain recomputes every hash and reports the first break, if any. The database refuses updates and deletes on the table, and the app's database account cannot change it either.

Export

Export log downloads every entry as CSV with the hashes, so a reviewer can verify the chain outside Evidentor.

Views of subject profiles, documents and transcripts are logged too, so a firm can answer who looked at what and when.