Change history
Every grant, adjustment and withdrawal, dated, referenced and linked to the approval that authorised it.
Reference · DK-06
Retained · Connection and change history
Reporting · Monthly or on request
Suitable for · Internal and external audit
Records that answer the question before an auditor asks it
Good records turn a stressful audit into a short conversation. We keep the history of who was granted access, what they reached, when it changed and who approved it, and we hand it to you in a form that is easy to read and easy to defend.
We provide services exclusively to businesses and organizations. We do not offer consumer or personal-device support. Minimum engagement: organizations with 10 or more staff who need access.
What we keep
The record has two halves. The first is the change history: every enrolment, adjustment and withdrawal, with the date, the role involved and the approval behind it. The second is the connection history: a log of access events against the arrangement, showing activity in a form that can be reviewed and reported on without poring through raw output.
Together these two halves let you answer the questions auditors actually pose. Which people could reach a given system during a given month. When a particular person's access began and ended. Who approved it. Whether anything happened that was not expected. We keep the answers ready rather than reconstructing them under pressure.
The reports you receive
- Monthly summary. A short account of changes made, requests closed and any notable activity during the month.
- Access list. On request, a current statement of who holds which access, in a format an auditor can accept as evidence.
- Change extract. For a defined period, the full log of adjustments with approvals attached.
- Activity extract. For a defined period, the connection history against the arrangement, filtered to the systems that matter.
Activity history
The log of access events, held in a form that can be filtered, reviewed and reported on cleanly.
Periodic reporting
A monthly summary as standard, with deeper extracts available whenever your organisation needs them.
Evidence on demand
Statements prepared for internal review, insurance queries or a formal audit, delivered in a usable form.
Preparing for an audit
When you know an audit is coming, tell us the period and the systems in scope. We assemble the relevant extracts and a short covering summary that explains what the record shows and how to read it. Your team does not have to learn a reporting format or sit with anyone extracting data. It arrives ready, in plain terms, with the detail behind it if the auditor wants to go deeper.
Retention and care of the record
Records are kept for the period your organisation requires and the period any applicable obligation requires, whichever is longer, and then retired in an orderly way. Access to the record is limited to those who legitimately need it, and every look at it is itself an event we can account for. The record is not a by-product of the service; it is part of the service, and we treat it as evidence from the moment it is created.
