Audit trail
A chronological, tamper-evident record of who did what, when and on what basis, linking each action to the obligation it served.
Overview
An audit trail lets an examiner or auditor reconstruct what happened without relying on anyone’s memory. It records the action, the actor, the time, the inputs and the reason, and it should be impossible to alter without detection.
It connects most directly to Hash-chained evidence, Evidence package and Record retention.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
If you cannot show it happened, for regulatory purposes it did not.
Who it affects
Every regulated organisation; especially those subject to record-keeping rules.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Audit trail. Select one to open it.
What to do about it
- 1Map where your obligations come from.
- 2Link each one to the controls and evidence behind it.
- 3Review the map whenever the business or the rules change.
From requirement to evidence.
Every action in Regulation Layer is written to your private, hash-chained evidence ledger.
Request early access →