The audit log and integrity check
What is recorded, why it cannot be quietly changed and how to verify it.
Last updated
The audit log records significant actions: sign-ins and failures, user and role changes, case views and decisions, identity requests, evidence access, settings changes and more.
What an entry holds
Who did it, what they did, which record it concerned and when. It never contains allegation text or a reporter's identity.
Why it is tamper-evident
- Entries are linked to one another in a chain.
- Changing or deleting an entry breaks the chain after it, so the change can be detected.
- The log can only be added to.
Verify
Open Audit log and choose Verify integrity. ClearVoice checks the whole chain and reports the first broken entry if any.
Viewing needs the audit view permission. Verifying needs the audit verify permission. Both are held by compliance officers and auditors, not by administrators.
Related guides
Still stuck?
The SLEM Technologies team can help with set-up and questions.