Skip to main content

System Audit Logs

The audit log records the actions in your CVD Portal workspace. It helps you show an auditor who did what and when.

What the log records​

CVD Portal writes an entry for actions that change data and for security events. Examples:

  • Report actions, for example a report view, an acknowledgment, a coordinator assignment, a remediation decision and a filed Article 14 stage.
  • Logins and failed logins.
  • Changes to settings.
  • Security review actions.

Each entry has the time, the user, the action, the target, a short detail text, the IP address and the country.

View the log​

Go to Settings → Audit Log. The page shows the 200 newest entries. The page has no search, filter or export.

To get older entries, use Settings → Account → Export your data. See Data Export & Retention.

Tamper evidence​

CVD Portal does not change or delete audit entries through the application. Each entry has a SHA-256 hash that links it to the entry before it. Every night, a scheduled job checks this chain for each company and alerts the CVD Portal operations team if the chain is broken.