Governance & Compliance

Audit Logs

Immutable, tamper-evident record of every action taken on the platform

Every user action, AI proposal, approval decision, automation execution, configuration change, and login event is recorded in OrcaMonitor's append-only audit ledger — providing a complete chain of evidence for compliance, forensics, and operational review.

Audit logs are not optional in regulated environments. OrcaMonitor's ledger is designed for compliance teams: entries are timestamped, identity-attributed, categorized by risk level, and retained for configurable periods. Logs can be exported for SIEM ingestion or compliance reporting.

Features

How OrcaMonitor implements audit logs

Append-Only Ledger

Audit entries cannot be modified or deleted through the application interface. The ledger is written to a write-once partition of your database with integrity checksums.

Full Action Coverage

Captured events include: logins, logouts, user CRUD, role changes, ticket actions, alert state changes, AI proposals, approvals, automation executions, credential vault access, and config changes.

Risk Classification

Every event is automatically tagged as Low, Medium, High, or Critical risk. High-risk events (credential access, role elevation, break-glass activation) trigger immediate notification.

Real-Time Alerting

Configure notifications on specific audit event types — e.g., alert team leads whenever a break-glass account is activated or a role assignment changes.

Export & SIEM Integration

Export audit logs as JSON, CSV, or forward them in real time to Splunk, Elastic SIEM, or any syslog-compatible receiver via the outbound log integration.

Retention Policies

Configure retention periods per event category. Default: 12 months for all events, 7 years for High/Critical events. Custom retention schedules are supported.

Capabilities

Tamper-detection checksums on all log entries
Full-text search across all audit events
Filter by user, action type, device, date range, and risk level
Downloadable compliance evidence packages
Scheduled audit report generation (daily, weekly, monthly)
API endpoint for programmatic log retrieval

Compliance Framework Alignment

These lines map OrcaMonitor features to the controls they help you evidence. They are not certifications of OrcaMonitor or Synetal Solutions — compliance is a conclusion your own auditor reaches about your organisation and scope.

SOC 2 Type II: CC6.8, CC7.2 — change management and logging evidence

ISO 27001: A.12.4 — logging and monitoring control evidence

HIPAA: §164.312(b) — audit controls for PHI-adjacent systems

NIST SP 800-53: AU-2, AU-3, AU-9 — audit record content and protection