Quick answer: Security isn’t only prevention — it’s attribution. Every administrative action is recorded append-only with actor and timestamp, so incidents reconstruct in minutes and insider mischief loses its favorite cover: deniability.
How it works
Append-only storage means even admins cannot rewrite history.
Visibility-rule changes, role grants and removals — the sensitive verbs are all logged.
Pair with few admin accounts for a clean accountability story.
Frequently asked questions
Can the log be exported?
Admin-facing views cover operational needs; extended audit export ships with the enterprise pack.
Does logging slow the app?
No — audit writes ride the same transactions as the actions themselves.