Compliance Audit Log

Auditor-defensible chronological record of every state transition in your firm's compliance programme. Every PCP publication, SAR submission, MLRO appointment, hit disposition, reassessment flag, beneficial-owner change — all of it appears here in order.

Where to find it

Sidebar → Audit Log.

What it shows

Each event is one row with:

• Human-readable label ("Published PCP v3", "Dispositioned AML hit", "Appointed MLRO")
• Raw action code (technical, e.g. firm.pcp.publish)
• Who did it — staff member display name
• When — full timestamp + relative ("3 hours ago")
• Affected record preview — the first 4 fields of the change

How to filter

Three filters at the top of the page:

• From / To dates — narrow the window. Defaults to all-time.
• Category — restrict to a single domain (PCP, SAR, MLRO, etc.). Categories are derived from the action-code prefix.

How auditors use it

Inspectors typically ask "show me when this client's risk level changed" or "show me when you appointed your current MLRO and what the basis was". The audit log is the answer to both — filter by client name in the search, or category in the dropdown, and the chronological record is there.

For longer-term archive defence, the audit log is also bundled into the Compliance Pack ZIP (in a future PR; for now, screenshot the page or export via the API).

What it doesn't show

• Pre-decision drafts — only committed state changes
• Read events — who looked at what; we don't track read access for performance reasons
• Cross-firm events — strictly scoped to your firm (RLS)