Skip to content
Spend

Records, audit and access reviews

Audit trail

Section titled “Audit trail”

Audit trail lists every event in order: who did what to which record, including agents, suppliers and integrations. The banner at the top says whether the ledger is verified: each event’s hash covers the one before it, so any change would break the chain. Filter by record, event, actor or dates, and export.

Security events

Section titled “Security events”

Security events shows sign-ins and refusals, account and role changes, provisioning, agent tokens, supplier bank changes, legal holds and exports. Your SIEM can collect the same feed in JSON, CEF or OCSF; see Security feed and audit.

Section titled “Records and legal holds”

Records and legal holds applies your retention schedule:

  • Records past their retention period are listed as eligible for disposition. Disposition is proposed by one person and approved by another.
  • Legal holds stop disposition for a matter: by supplier, contract, specific records or a date range. Release a hold with a note when the matter closes.

Access reviews

Section titled “Access reviews”

Access reviews asks reviewers to confirm or remove each person’s privileged access (such as user administration, payment release and supplier maintenance) on a schedule. Each decision is recorded, and the review is complete when every person has been decided.